Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
In Inputs.conf you can set an interval that a powershell script runs to collect data... but can you somehow set the f...
by
mtmoore
Explorer
in
Getting Data In
10-23-2014
|
2
|
3
| ||
|
|
Hi, when I do the filtering windows log, I use the main program 6.1.4 then changed forwarder license, so Windows AD (...
by
chengyu
Path Finder
in
Getting Data In
10-23-2014
|
0
|
3
| ||
|
|
I am not getting expected behavior when specifying inputs.
All my logs are in a folder called "/syslog/"
1.3M -...
by
xdaxdb
Explorer
in
Getting Data In
10-22-2014
|
0
|
11
| ||
|
|
I'm working in an environment where we have the universal forwarder (5.0.5 - old I know) installed on all our systems...
by
riodutchie
Explorer
in
Getting Data In
10-23-2014
|
0
|
7
| ||
|
I noticed that a new install of splunkforwarder automatically monitors the following directories:
Monitored Direct...
by
bbiandov
Path Finder
in
Getting Data In
10-22-2014
|
1
|
2
| ||
|
|
I have a log file with a timestamp at the beginning of an event in the format YYYY-MM-DD HH:MM:SS.mmm. The automatic ...
by
ulrich_track
Path Finder
in
Getting Data In
10-23-2014
|
0
|
2
| ||
|
|
Hi,
I've looked though similar questions about log rotation and also the most related documentation topic here htt...
by
rnr
Path Finder
in
Getting Data In
10-20-2014
|
1
|
5
| ||
|
|
I am getting these errors, even though i think i have the timestamp parsed correctly based on other splunk answers.
...
by
sonicZ
Contributor
in
Getting Data In
10-22-2014
|
0
|
1
| ||
|
|
by
dgravesa1
New Member
in
Getting Data In
10-22-2014
|
0
|
2
| ||
|
|
Can SSL configuration be applied on Splunk Universal Forwarders? My understanding is that it was only available on Sp...
by
Ant1D
Motivator
in
Getting Data In
10-22-2014
|
1
|
4
| ||
|
|
I've set up forwarding many times, but for some reason cannot get my auditd log to properly appear in Splunk. I'm ban...
by
BT_Neophyte
Explorer
in
Getting Data In
10-22-2014
|
0
|
2
| ||
|
I want to get the time in this format 2009-Sep-30 from 20090930
by
srinathd
Contributor
in
Getting Data In
10-22-2014
|
0
|
1
| ||
|
|
I have these 2 group:
[monitor:///pack/jboss/server/edu01_*/logs/server.log] sourcetype = server_log index = myind...
by
khuongdp
New Member
in
Getting Data In
10-21-2014
|
0
|
2
| ||
|
|
I have created an outputs.conf on my Indexer. With the following stanza.
[output]
defaultGroup = indexerB
[indexA...
by
gekoner
Communicator
in
Getting Data In
10-21-2014
|
0
|
1
| ||
|
|
Splunk is not recognizing the timestamps in these logs. Some are picked up but others are grouped together into a sin...
by
smudge797
Path Finder
in
Getting Data In
10-21-2014
|
0
|
3
| ||
|
|
Hi, I like to filter out "%ASA-4-106023" before sending log to splunk indexer, Below are my config:
inputs.conf [m...
by
mehhos
Engager
in
Getting Data In
10-21-2014
|
0
|
2
| ||
|
|
I have Splunk Universal Forwarders installed on my Windows Domain Controllers. Up until 5 weeks ago, sourcetype=Activ...
by
psharkey
Explorer
in
Getting Data In
10-17-2014
|
1
|
1
| ||
|
|
I know this is not a Splunk specific question, however I have asked a similar question in the past about tuning for U...
by
jodros
Builder
in
Getting Data In
10-15-2014
|
0
|
1
| ||
|
|
I have a dashboard containing a checkbox with some values. These values are OR'd together in my search string. For ex...
by
jmc82
Explorer
in
Getting Data In
10-21-2014
|
2
|
1
| ||
|
|
After reading this and this I'm not sure about the use of persistent queues on Splunk.
In particular, in one impl...
by
fernandoandre
Communicator
in
Getting Data In
05-14-2012
|
1
|
2
| ||
|
|
I am having issues setting up a UNIX universal forwarder to monitor IBM IHS http log files -- it does not appear to b...
by
sjnorman
Explorer
in
Getting Data In
09-11-2014
|
0
|
3
| ||
|
|
alt textI have a log file that writes everything in one line. I'm try to count the number of events in the logfile bu...
by
jbouch03
Path Finder
in
Getting Data In
10-20-2014
|
0
|
3
| ||
|
|
I was wondering if anyone has a good search that can help track the weekly upgrade progress for UF agents? With the d...
by
ltrand
Contributor
in
Getting Data In
10-20-2014
|
1
|
1
| ||
|
|
Hi,
I see duplicate data getting ingested when a file which was already ingested is being recreated upon a system ...
by
soniaraj13
New Member
in
Getting Data In
10-19-2014
|
0
|
1
| ||
|
|
I have a datasource that looks like this:
{
"results": {
"serverone": {
"time": 2,
"results":...
by
David
Splunk Employee
in
Getting Data In
10-19-2014
|
0
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
204 -
data
439 -
development
5 -
encryption
1 -
eval
2 -
field extraction
535 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
900 -
host
152 -
HTTP Event Collector
421 -
index
530 -
indexer
682 -
indexing performance
1 -
inputs.conf
811 -
installation
4 -
intermediate forwarder
134 -
introduction
3 -
JSON
381 -
kvstore
1 -
Linux
435 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
182 -
monitor
303 -
monitoring console
1 -
other
26 -
proactive Splunk component monitoring
2 -
props.conf
942 -
regex
5 -
saved search
2 -
scripted input
237 -
search
1 -
search head
2 -
source
282 -
sourcetype
474 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
304 -
time
203 -
transforms.conf
552 -
troubleshooting
15 -
universal forwarder
1,514 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
572 -
XML
90
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
Prove Your Splunk Prowess at .conf25—No Prereqs Required!
Your Next Big Security Credential: No Prerequisites Needed
We know you’ve got the skills, and now, earning the ...
Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code
This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...
Splunk Answers Content Calendar, July Edition I
Hello Community!
Welcome to another month of Community Content Calendar series! For the month of July, we will ...
