Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | I am not getting expected behavior when specifying inputs. All my logs are in a folder called "/syslog/" 1.3M -rw-r... by xdaxdb Explorer in Getting Data In 10-23-2014 0 11 | 0 | 11 | |
| | I'm working in an environment where we have the universal forwarder (5.0.5 - old I know) installed on all our systems... by riodutchie Explorer in Getting Data In 10-23-2014 0 7 | 0 | 7 | |
 | I noticed that a new install of splunkforwarder automatically monitors the following directories: Monitored Director... by bbiandov Path Finder in Getting Data In 10-23-2014 1 2 | 1 | 2 | |
| | I have a log file with a timestamp at the beginning of an event in the format YYYY-MM-DD HH:MM:SS.mmm. The automatic ... by ulrich_track Path Finder in Getting Data In 10-23-2014 0 2 | 0 | 2 | |
| | Hi, I've looked though similar questions about log rotation and also the most related documentation topic here http:... by rnr Path Finder in Getting Data In 10-23-2014 1 5 | 1 | 5 | |
| | I am getting these errors, even though i think i have the timestamp parsed correctly based on other splunk answers. ... by sonicZ Contributor in Getting Data In 10-22-2014 0 1 | 0 | 1 | |
| | 0 | 2 | ||
| | Can SSL configuration be applied on Splunk Universal Forwarders? My understanding is that it was only available on Sp... by Ant1D Motivator in Getting Data In 10-22-2014 1 4 | 1 | 4 | |
| | I've set up forwarding many times, but for some reason cannot get my auditd log to properly appear in Splunk. I'm ban... by BT_Neophyte Explorer in Getting Data In 10-22-2014 0 2 | 0 | 2 | |
 | I want to get the time in this format 2009-Sep-30 from 20090930 by srinathd Contributor in Getting Data In 10-22-2014 0 1 | 0 | 1 | |
| | I have these 2 group: [monitor:///pack/jboss/server/edu01_*/logs/server.log] sourcetype = server_log index = myindex... by khuongdp New Member in Getting Data In 10-22-2014 0 2 | 0 | 2 | |
| | I have created an outputs.conf on my Indexer. With the following stanza. [output] defaultGroup = indexerB [indexAnd... by gekoner Communicator in Getting Data In 10-21-2014 0 1 | 0 | 1 | |
| | Splunk is not recognizing the timestamps in these logs. Some are picked up but others are grouped together into a si... by smudge797 Path Finder in Getting Data In 10-21-2014 0 3 | 0 | 3 | |
| | Hi, I like to filter out "%ASA-4-106023" before sending log to splunk indexer, Below are my config: inputs.conf [m... by mehhos Engager in Getting Data In 10-21-2014 0 2 | 0 | 2 | |
| | I have Splunk Universal Forwarders installed on my Windows Domain Controllers. Up until 5 weeks ago, sourcetype=Activ... by psharkey Explorer in Getting Data In 10-21-2014 1 1 | 1 | 1 | |
| | I know this is not a Splunk specific question, however I have asked a similar question in the past about tuning for U... by jodros Builder in Getting Data In 10-21-2014 0 1 | 0 | 1 | |
| | I have a dashboard containing a checkbox with some values. These values are OR'd together in my search string. For ex... by jmc82 Explorer in Getting Data In 10-21-2014 2 1 | 2 | 1 | |
| | After reading this and this I'm not sure about the use of persistent queues on Splunk. In particular, in one implem... by fernandoandre Communicator in Getting Data In 10-21-2014 1 2 | 1 | 2 | |
| | I am having issues setting up a UNIX universal forwarder to monitor IBM IHS http log files -- it does not appear to b... by sjnorman Explorer in Getting Data In 10-20-2014 0 3 | 0 | 3 | |
| | alt textI have a log file that writes everything in one line. I'm try to count the number of events in the logfile bu... by jbouch03 Path Finder in Getting Data In 10-20-2014 0 3 | 0 | 3 | |
| | I was wondering if anyone has a good search that can help track the weekly upgrade progress for UF agents? With the ... by ltrand Contributor in Getting Data In 10-20-2014 1 1 | 1 | 1 | |
| | Hi, I see duplicate data getting ingested when a file which was already ingested is being recreated upon a system fa... by soniaraj13 New Member in Getting Data In 10-20-2014 0 1 | 0 | 1 | |
| | I have a datasource that looks like this: { "results": { "serverone": { "time": 2, "results": 3... by David Splunk Employee  in Getting Data In 10-19-2014 0 1 | 0 | 1 | |
| | Hello Splunkies, I was wondering if splunk could monitor a logs sent by email to splunk server. if yes how this coul... by royimad Builder in Getting Data In 10-18-2014 0 2 | 0 | 2 | |
| | I want to index the dynamic performance views that are available in SYS of Oracle Database on Splunk. These views inc... by rsawant Explorer in Getting Data In 10-17-2014 1 5 | 1 | 5 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
13 -
blacklist
92 -
configuration
33 -
CSV
210 -
data
505 -
deployer
1 -
development
5 -
field extraction
564 -
forwarder management
2 -
heavy forwarder
966 -
host
159 -
HTTP Event Collector
445 -
index
544 -
indexer
717 -
indexer clustering
1 -
inputs.conf
844 -
installation
5 -
intermediate forwarder
146 -
JSON
395 -
Linux
461 -
Mac
30 -
modular input
195 -
monitor
314 -
other
83 -
props.conf
996 -
saved search
2 -
scripted input
249 -
search
1 -
search head
2 -
search head clustering
1 -
source
292 -
sourcetype
497 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
325 -
time
204 -
transforms.conf
585 -
troubleshooting
14 -
universal forwarder
1,577 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
597 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Announcing Modern Navigation: A New Era of Splunk User Experience
We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...
Casting Call: Compete in Cyber Games
Lights, Camera, SecOps: Apply to Compete in Cyber Games
Think you have what it takes to beat the clock? ...
How Edge Processor's Durable Queue Works
Edge Processor sits in one of the most consequential places in any Splunk pipeline: between your data sources ...
