Getting Data In

Getting Data In
Community Activity
sumitnagal
I have log which is printing value of an API in this manner getCall=144:144:1:144:144 where I am parsing the value l...
by sumitnagal Path Finder in Getting Data In 01-27-2015
0 16
0
16
dbrown_sfdc
I want to have two heavy forwarders set up to receive the same syslog data at the same time. If one fails the other ...
by dbrown_sfdc New Member in Getting Data In 01-27-2015
0 1
0
1
redc
Maybe I'm blowing smoke, but as I understand it, you can use PHP scripts with the "script" command. This is preferab...
by redc Builder in Getting Data In 01-27-2015
0 5
0
5
euphvx
Hi, I am brand new to Splunk. I've read up on what I can in the past few days and need some help clarifying some thi...
by euphvx Explorer in Getting Data In 01-27-2015
0 8
0
8
mjdozza
In short I have a heavy forwarder that is receiving a bunch of data from a syslog feed. The forwarder will then send ...
by mjdozza New Member in Getting Data In 01-27-2015
0 2
0
2
Olamide22
Hello All - We currently have a distributed architecture that's laid out in the following manner : UF ---> Indexer...
by Olamide22 Explorer in Getting Data In 01-27-2015
1 5
1
5
Nicholas_Key
Here are the steps to configure your Universal Forwarder to forward events to your online sandbox instance: Enable r...
by Nicholas_Key Splunk Employee Splunk Employee in Getting Data In 01-27-2015
2 5
2
5
MayankSplunk
I have splunk forwarder setup to forward cloudfront logs on S3, say following is the example of raw logs: 2015-01-1...
by MayankSplunk Path Finder in Getting Data In 01-26-2015
0 3
0
3
DaClyde
We have a slightly odd architecture as we have a single search head, a single indexer and multiple forwarders (for th...
by DaClyde Contributor in Getting Data In 01-26-2015
1 3
1
3
johnglass
We are preparing to roll out the Universal Forwarder to a pilot group of 50 Solaris servers before deploying to the e...
by johnglass Explorer in Getting Data In 01-26-2015
0 3
0
3
mbrunetto
My Typing Queue is currently blocking and causing backups. I believe I have the order right udpin/splunktcpin, parsi...
by mbrunetto Path Finder in Getting Data In 01-26-2015
1 1
1
1
ronak
Splunk Gurus - I've yet not absorbed JSON data in my setup, but I'm anticipating many sources in near future genera...
by ronak Path Finder in Getting Data In 01-25-2015
0 3
0
3
a212830
Hi, I need to monitor some logs where I need to wildcard part of the hostname into the path. Is that possible: For...
by a212830 Champion in Getting Data In 01-25-2015
0 7
0
7
xdp4
I'm using db connect to access our SQL SCCM database which stores timestamps as NT EPOCH. I want to use props.conf t...
by xdp4 Explorer in Getting Data In 01-24-2015
0 5
0
5
mlachnietpeckha
Hello all, my apologies for a question that is probably documented and I am just not figuring out. I am trying to ta...
by mlachnietpeckha New Member in Getting Data In 01-24-2015
0 3
0
3
josefa
Hi everyone, I have a Splunk indexer server, which receives data from 3 forwarders and also through UDP. I got the a...
by josefa Path Finder in Getting Data In 01-23-2015
1 7
1
7
aakwah
Hello, I am wondering how to send only audit and splunkd logs of splunk instance to external syslog server, I alread...
by aakwah Builder in Getting Data In 01-23-2015
0 2
0
2
himynamesdave
I have logs that contains different customer IDs. I am intending to split different events from this log into differe...
by himynamesdave Contributor in Getting Data In 01-23-2015
0 1
0
1
a212830
Hi, I have a multi-line feed that appears to be having issues when the "next event" is delayed. Each event starts w...
by a212830 Champion in Getting Data In 01-23-2015
0 10
0
10
bzhsteven
I have a forwarder which I want to send multiple monitoring to multiple indexes. In example so: [monitor:///var/log/...
by bzhsteven New Member in Getting Data In 01-23-2015
0 1
0
1
abolduc
Hello All, I can't see to find the answer to getting the Windows Universal Forwarder connected to the online sandbox...
by abolduc New Member in Getting Data In 01-22-2015
0 3
0
3
mgaraventa_splu
I am seeing an issue with missing logs when the forwarder agent is in busy periods, which is blocking us from investi...
by mgaraventa_splu Splunk Employee Splunk Employee in Getting Data In 01-22-2015
1 1
1
1
jimjohn
Hi I want splunk to populate _time field with value from file name. for ex my file name is ABC_20140131 I want _tim...
by jimjohn Path Finder in Getting Data In 01-22-2015
0 6
0
6
dompjm
Has anyone built their own Universal Forwarder for AIX rpm? Managing tar balls is a but problematic with a large n...
by dompjm New Member in Getting Data In 01-22-2015
0 1
0
1
Shreyas88
I have a 64 bit AIX machine. And i installed the 64 bit splunk forwarder. But when i try to start the splunk i'm gett...
by Shreyas88 New Member in Getting Data In 01-22-2015
0 2
0
2
Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...

Build and Launch AI Agents from Your Splunk Workflows

Replay Tech Talk Build and Launch AI Agents from Your Splunk Workflows     We’ve all been there: juggling ...

index This | What kind of room has no doors?

IndexEducation Cover Art Banner Cisco.png August 2026 Edition  Hayyy Splunk Education Enthusiasts and the ...
Top Solution Authors