Getting Data In

Discussions

Thread Info

StatsD backend for Splunk

With the release of Splunk 7 and Metrics being top priority - I am trying to configure StatsD to send UDP traffic to ...

by Explorer in

Import json file in app.

Hello, How can I import json files inside the application i.e. cisco app? Thanks,

by Explorer in

What are the pain points with deploying your Splunk architecture on Windows OS?

I am growing very tired of being asked to justify my "undocumented" and "bigoted" best-practice of NEVER deploying sp...

by Esteemed Legend in

Multi-select input populate all users with a certain attribute.

I have a Dashboard for viewing activity from suspicious accounts. I currently use a multi-select input where I am run...

by New Member in

Run a Linux shell script with Alert Action in the standard Search app.

I am running version 8.x. I want to add the capability to run a custom Linux bash script as Alert Action with the OOT...

by New Member in

Issues Starting Splunk Universal Forwarder: /opt/splunkforwarder/bin/splunkd: error while loading shared libraries: libpcre2-8.so

I'm trying to install a forwarder on a NAS box but everytime I try to start it I get the error: /opt/splunkforwarder/...

by Explorer in

help with props.conf

I have the following raw data and I am trying to break the individual events starting with timestamp and before anoth...

by Builder in

Does Splunk Cloud use a self-signed certificate?

I have found out that Splunk Cloud Trial uses a self-signed certificate for its HTTP Event collector input endpoint. ...

by Engager in

Can I set-up Splunk to replace a syslog server?

We need to ingest syslog data. Rather then send to a syslog server, then read data from disk with a Forwarder, it see...

by Influencer in

Is it possible to use the same certificate for web UI access and data forwarding?

As in title, I was wondering if it is possible to use the same certificate on Heavy forwarders for access to the web ...

by Explorer in

_time Issues with Monthly average

I have data in a CSV with below format.. 2 columns Date & count All I want is monthly average .. | timecha...

by Contributor in

How to Set up Splunk Enterprise- Forwarders and Receivers?

I am trying to understand how to set up Splunk for the first time. I have several Server VMs (exchange, DC, SCCM, Spl...

by Engager in

Does Splunk provide updates when vulnerabilities are found in Add-Ons?

Need to know if security vulns are patched in add-ons too.

by New Member in

How do you do a spath search that would search for multiple models with a variance of IOS levels?

Hello, I am trying to acquire some input for SPL parsing a JSON file using the |spath command. Here is an example...

by New Member in

Splunk Universal forwarder upgrade to 8.0.2

Hi , I tried to upgrade splunk universal forwarder from 7.0.2 to 8.0.2 and everything looks good , No error in splunk...

by Explorer in

Universal Forwarder vs Heavy FOrwarder

Hi All, Is there any recent test,conf discussion or doc around mentioned below splunk blog 2016: https://www.sp...

by Motivator in

Symantec Cloud Scripted Input

Evaluating Symantec EndPoint Protection Cloud product which has a technote for getting events into Splunk Enterprise ...

by Explorer in

parse csv content and header for fields

Hi @ All, i´ve got problems to parse the following file / content: "CreationTime","LastWriteTime","LastAccessTi...

by Path Finder in

Could someone help me find out whether i am getting data from universal forwarder to heavy forwarder?

Hello, Please could someone help me find out whether i am getting data from the universal forwarder to the heavy forw...

by Engager in

Data Ingestion into Phantom

How do i ingest data into Splunk Phantom ?

by Engager in

Getting Data In

Discussions

StatsD backend for Splunk

Import json file in app.

What are the pain points with deploying your Splunk architecture on Windows OS?

Multi-select input populate all users with a certain attribute.

Run a Linux shell script with Alert Action in the standard Search app.

Issues Starting Splunk Universal Forwarder: /opt/splunkforwarder/bin/splunkd: error while loading shared libraries: libpcre2-8.so

help with props.conf

Does Splunk Cloud use a self-signed certificate?

Can I set-up Splunk to replace a syslog server?

Is it possible to use the same certificate for web UI access and data forwarding?

_time Issues with Monthly average

How to Set up Splunk Enterprise- Forwarders and Receivers?

Does Splunk provide updates when vulnerabilities are found in Add-Ons?

How do you do a spath search that would search for multiple models with a variance of IOS levels?

Splunk Universal forwarder upgrade to 8.0.2

Universal Forwarder vs Heavy FOrwarder

Symantec Cloud Scripted Input

parse csv content and header for fields

Could someone help me find out whether i am getting data from universal forwarder to heavy forwarder?

Data Ingestion into Phantom

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!

Read the report >

Palo Alto Networks config logs not showing before ...

What is the best way to monitor large log files?

How to determine you "host" name for an HEC endpoi...

Why does Linux Auditd App filter out root for the ...

Free Splunk Add Data missing?

Getting Data In

Discussions

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.Find out what your skills are worth! Read the report >

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!

Read the report >