Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | Say you are running a 6.1 indexer. Can you upgrade the forwarders to 6.2 versions without upgrading the indexer? by sysadm1n New Member in Getting Data In 11-21-2014 0 1 | 0 | 1 | |
| | i need to add the path below to my inputs.conf file and it has a lot of .xml files `/ibuapps/sales/2014-11-11//*.xml... by brod_geico Path Finder in Getting Data In 11-21-2014 0 3 | 0 | 3 | |
| | Hi, I below is the inputs.conf which i have configured on my indexer, but it is not blocking anything. is this is co... by kpavan Path Finder in Getting Data In 11-21-2014 0 6 | 0 | 6 | |
| | Hi splunkers, I just want to ask for any recommended or even tested loadbalancer upon forwarding logs to 3 indexers.... by sympatiko Communicator in Getting Data In 11-21-2014 0 7 | 0 | 7 | |
 | Hi Splunkers, I know about we are able to limit network traffic between Peer （a.k.a. Indexer ）and Universal Forward... by sunrise Contributor in Getting Data In 11-21-2014 1 5 | 1 | 5 | |
 | how to fix this error , "WARN TcpOutputProc - Forwarding to indexer group GSOC blocked for 9500 seconds". I cant rec... by tiny3001 Path Finder in Getting Data In 11-21-2014 0 1 | 0 | 1 | |
| | Hi, Good day splunkers. Is it the possible to forward Fortigate logs to multiple indexers via forwarders?, I already... by sympatiko Communicator in Getting Data In 11-21-2014 0 1 | 0 | 1 | |
 | Hi all, I've got a new set of logs from one of our development teams for some in-house applications. They have writt... by javiergn Super Champion in Getting Data In 11-20-2014 1 7 | 1 | 7 | |
| | Hi, It seems log file contains CTRL-M character will cause duplicate parsing in splunk indexer so I would like to fil... by shangshin Builder in Getting Data In 11-20-2014 0 10 | 0 | 10 | |
 | How can I use Splunk to tell me how much data per day each host is forwarding to Splunk? Basically, I need a report t... by feickertmd Communicator in Getting Data In 11-20-2014 0 4 | 0 | 4 | |
| | I am trying to split some really long lines we have put in our .conf files using the traditional Unix way of escaping... by MikhailArefiev Explorer in Getting Data In 11-19-2014 0 5 | 0 | 5 | |
| | Hi, I'm just new with splunk. I'm getting this error upon forwarding my fortigate logs to splunk. How can I set splu... by sympatiko Communicator in Getting Data In 11-19-2014 0 4 | 0 | 4 | |
| | Sometimes, when troubleshooting inputs on large installations (deployment apps, several layers of forwarders, etc), i... by ruiaires Path Finder in Getting Data In 11-19-2014 0 1 | 0 | 1 | |
| | Hi all, I want the "date" field to be used as timestamp. However, in some of the events this field is missing and so... by saileec Engager in Getting Data In 11-19-2014 0 3 | 0 | 3 | |
| | Based on the documentation provided, the proper command-line arguments to be used when deploying certificates is CERT... by vonStauf Explorer in Getting Data In 11-19-2014 1 1 | 1 | 1 | |
| | Hello, We’re looking to remove data from one of our indexes, preferably using the clean operator from the CLI. We h... by Benlavender Explorer in Getting Data In 11-19-2014 0 1 | 0 | 1 | |
| | I have configured a universal forwarder on one of our Linux systems. When i check the logs it shows Connection to ho... by nitheeshp86 New Member in Getting Data In 11-19-2014 0 1 | 0 | 1 | |
| | I have unix timestamp in my data file . review/time: 1182816000 review/summary: Periwinkle... To parse this timesta... by akshaybahetii New Member in Getting Data In 11-18-2014 0 7 | 0 | 7 | |
| | Hi guys, I have a source that send log via syslog push tcp 514. The configuration is working well on my SPlunk test ... by bgaignon Path Finder in Getting Data In 11-18-2014 0 7 | 0 | 7 | |
 | Hello, I've read Splunk documentation on that matter but I'm not able to find my answer. Does anyone know how Splunk... by gnoellbn Explorer in Getting Data In 11-18-2014 0 2 | 0 | 2 | |
| | I went through the Exploring Splunk book which states that the data is indexed w.r.t. _time, host , source & sourceTy... by mohitab Path Finder in Getting Data In 11-17-2014 0 7 | 0 | 7 | |
| | I want to freeze all data older than 90 days. My /opt/splunk/etc/system/local/indexes.conf file looks like this [de... by rblalock New Member in Getting Data In 11-17-2014 0 2 | 0 | 2 | |
| | Hi, i want to forward files from the storage instead of from the local drives, what would be the solution? thks by newbiesplunk Path Finder in Getting Data In 11-17-2014 0 2 | 0 | 2 | |
| | Hi , We have apache access logs generated in below format . access.log_2014.11.11 , access.log_2014.11.12 , ac... by danishdanish1 New Member in Getting Data In 11-17-2014 0 1 | 0 | 1 | |
| | I tried adding the data through inputs.conf. I am trying to add sample log file from my system to the splunk server. ... by vaishnavi07 Explorer in Getting Data In 11-17-2014 0 20 | 0 | 20 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
13 -
blacklist
92 -
configuration
32 -
CSV
209 -
data
502 -
development
5 -
field extraction
564 -
forwarder management
2 -
heavy forwarder
961 -
host
159 -
HTTP Event Collector
444 -
index
544 -
indexer
715 -
inputs.conf
841 -
installation
5 -
intermediate forwarder
145 -
JSON
395 -
Linux
461 -
Mac
30 -
modular input
195 -
monitor
313 -
other
83 -
props.conf
995 -
saved search
2 -
scripted input
249 -
search
1 -
search head
2 -
source
291 -
sourcetype
496 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
325 -
time
204 -
transforms.conf
584 -
troubleshooting
14 -
universal forwarder
1,572 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
596 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0
Are you ready to transform how your team handles complex data requests?
We invite you to our upcoming ...
Announcing Modern Navigation: A New Era of Splunk User Experience
We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...
Unanswered Topics
