Getting Data In

Getting Data In
Community Activity
edschembor
Title is pretty self explanatory. I'm new to Splunk and trying to learn as much as possible. EDIT: Just found the Yo...
by edschembor Path Finder in Getting Data In 06-05-2014
0 1
0
1
hobbymaster001
I am trying to create a search that is pulling geographic IP information about the users and showing which server was...
by hobbymaster001 Engager in Getting Data In 06-05-2014
0 1
0
1
ben_leung
If my forwarder's inputs.conf stanza line is set to batch instead of monitor, it will delete the file after it is ind...
by ben_leung Builder in Getting Data In 06-05-2014
2 1
2
1
edwardman88
Hi, I need Splunk to recognize the timestamps down to microseconds. A sample event is listed below "2014-06-03-18.3...
by edwardman88 Explorer in Getting Data In 06-04-2014
0 3
0
3
rameshlpatel
hi, at time of adding database input i select tail as input type and add following query. SELECT pkey,fk_vehicle...
by rameshlpatel Communicator in Getting Data In 06-04-2014
0 2
0
2
hcpr
Hi there. While adding Checkpoint logs to a new Splunk installation (6.1.1) with the OPSEC addon (version 2.1.0) I no...
by hcpr Path Finder in Getting Data In 06-04-2014
0 6
0
6
basanthp
Can someone advice on the splunk query to generate the list of users, assigned roles and associated Active Directory ...
by basanthp Path Finder in Getting Data In 06-04-2014
0 1
0
1
mfrost8
So I am writing a little python script that I intend to run as a scripted input. The script will collect informatio...
by mfrost8 Builder in Getting Data In 06-04-2014
0 2
0
2
tyronetv
Have an environment where a directory is used to 'stage' files waiting for an update. Essentially, a file is sent to...
by tyronetv Communicator in Getting Data In 06-04-2014
0 1
0
1
mcamilleri
I need to get a vague idea of disk space requirements before I start forwarding logs to a Splunk instance. Each index...
by mcamilleri Path Finder in Getting Data In 06-04-2014
0 2
0
2
woodcock
This configuration is not working: From inputs.conf [monitor:///somepath/.csv] host_regex = .([^])[^].csv(?:.gz)?$ ...
by Esteemed Legend in Getting Data In 06-03-2014
0 3
0
3
iceokoli
I need to monitor daily reports with splunk. However the events in the logs are constantly updated throughout the day...
by iceokoli Engager in Getting Data In 06-03-2014
0 3
0
3
safe_splunk
Hi, I have 2 files with 1.log and 1.log.gz but they have exact same data. I see that indexer indexes both somehow. ...
by safe_splunk Explorer in Getting Data In 06-03-2014
0 2
0
2
adamblock1
I have somewhere between 20-50 universal forwarders installed on Solaris hosts. I need to change the Splunk admin pa...
by adamblock1 Explorer in Getting Data In 06-03-2014
0 4
0
4
dlovett
We have a weird case our DBA and splunk team is trying to resolve; Our DBAs are seeing 124M of usage increasing ro...
by dlovett Path Finder in Getting Data In 06-02-2014
1 4
1
4
cgregors
I'm trying to get an archival datafile into the indexes via oneshot. Current directory = C:\Program Files\SplunkUniv...
by cgregors Engager in Getting Data In 06-02-2014
0 1
0
1
JoshuaThompson
I have added some IIS logs to Splunk via the "Files and Directories" input. While I can query the raw data it does n...
by JoshuaThompson New Member in Getting Data In 06-02-2014
0 4
0
4
krish3
Hi, I am using splunk enterprise 6.0 and i used iplocation command on a index using the following command and it jus...
by krish3 Contributor in Getting Data In 06-02-2014
0 1
0
1
JoshuaThompson
Hello, I am currently using a trial version of Splunk 6.1 Enterprise. I am looking for a query that will create a r...
by JoshuaThompson New Member in Getting Data In 06-02-2014
0 6
0
6
mcbradford
I want to monitor the following C:\Users\...\AppData\Local\Microsoft\Windows\Burn sometimes with the Burn director...
by mcbradford Contributor in Getting Data In 06-02-2014
0 3
0
3
rameshlpatel
Hi, I wanted to know should we use DNS entrie for indexer in forwarder configuration. e.g. [tcpout:default-autolb-...
by rameshlpatel Communicator in Getting Data In 06-02-2014
0 1
0
1
rainhailrob
We were initially trying to upgrade from 6.0.3 to 6.1.1. However, we keep receiving the following message, "Splunk l...
by rainhailrob Path Finder in Getting Data In 06-02-2014
0 3
0
3
bryancampbell
I am obviously doing something wrong, but this is twice now, i have installed the forwarder for Windows, and changes ...
by bryancampbell New Member in Getting Data In 05-30-2014
0 1
0
1
Krishna_R
I have to upload data from different sources (collected manually) and upload to a splunk indexer. The files are copie...
by Krishna_R Path Finder in Getting Data In 05-30-2014
1 6
1
6
david_fresne
I have a question on how to restrict what goes into an index. I have read a number of posts and documentation on how ...
by david_fresne New Member in Getting Data In 05-30-2014
0 5
0
5
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...