Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | hello I am trying to extract a field and change the value of source for apache logs. The source comes as /tmp/usr/... by theouhuios Motivator in Getting Data In 05-08-2014 0 8 | 0 | 8 | |
 | Hey, I am monitoring some Windows Event Log data and I want to see from this any events where the 'startup type' is ... by Ant1D Motivator in Getting Data In 05-08-2014 0 1 | 0 | 1 | |
| | I have a network where I have a splunk instance that is off to the side on my network, as in: Core Splunk Instance (... by jmsiegma Path Finder in Getting Data In 05-07-2014 1 2 | 1 | 2 | |
| | I installed the splunkforwarder on a few machines, and added /var/log as a syslog source. I overlooked the fact that... by tinkster Explorer in Getting Data In 05-07-2014 0 4 | 0 | 4 | |
| | The Splunk software matrix doesn't mentioned support for Windows Server 2012 R2. What versions of Splunk and the Uni... by hornslethk Engager in Getting Data In 05-07-2014 4 17 | 4 | 17 | |
| | I've run back and forth through the props.conf documentation and done a few circuits of Answers, but I haven't found ... by willial Communicator in Getting Data In 05-07-2014 0 5 | 0 | 5 | |
| | Okay, so here is my situation: I am running a Splunk for Window Enterprise Server along with a separate OSSEC server ... by ceichhorn Engager in Getting Data In 05-07-2014 0 4 | 0 | 4 | |
| | Is there any capability within Splunk so it automatically deletes the Application, Security, and System Logs in Event... by sysadmin74 New Member in Getting Data In 05-07-2014 0 3 | 0 | 3 | |
| | What are the steps to setup a new CA and generate new certs for SSL forwarding with no auth: by matt Splunk Employee  in Getting Data In 05-06-2014 0 4 | 0 | 4 | |
| | I am writing a Windows Security Log search for user accounts and have the eventID I need to search for but the result... by kluey Explorer in Getting Data In 05-06-2014 0 2 | 0 | 2 | |
| | Hi Team, I have a folder by name Mumbai under C drive with subfolders in it. If i edit the inputs.conf file as mon... by sushma7 Path Finder in Getting Data In 05-06-2014 1 20 | 1 | 20 | |
| | Guys, I'm trying to index some Syslog data from some F5's. The issue I have is, Splunk seems to recognize and break ... by salles Loves-to-Learn Lots in Getting Data In 05-05-2014 0 1 | 0 | 1 | |
| | We are running searchhead pooling and have many indexers. I would like to be able to find out how long it takes for ... by rmorlen Splunk Employee in Getting Data In 05-05-2014 0 3 | 0 | 3 | |
| | Hi Guys, I'm trying to break events in Splunk with a text file with just ip addresss in it and no time stamps. The f... by tbalouch Path Finder in Getting Data In 05-05-2014 0 2 | 0 | 2 | |
| | I am using the DB Connect app to connect to a MYSQL database and input the data from a table. the datetime fields in... by hylee Explorer in Getting Data In 05-05-2014 0 4 | 0 | 4 | |
 | I have McAfee logs that contain going into Splunk and the event time is populated with the time that the event is act... by digital_alchemy Path Finder in Getting Data In 05-05-2014 0 3 | 0 | 3 | |
| | Hi, I tried props.conf and transforms.conf solution but it did not work. props.conf [access_combined] pulldown_ty... by safe_splunk Explorer in Getting Data In 05-05-2014 0 6 | 0 | 6 | |
| | we have multiple files that are being monitored ; file.1, file.2, file.3 Bob.1, Bob.2, Bob.3, Cat.1 Cat.2, Cat3. ...e... by d646800 Explorer in Getting Data In 05-04-2014 0 2 | 0 | 2 | |
| | Hello All, i am struggling with my db-dump input in loading data from db query to index. I have defined the db input ... by linu1988 Champion in Getting Data In 05-03-2014 0 1 | 0 | 1 | |
| | Have a clustered environment of 3 indexers. Data in the indexers was used to test full architecture capability. don... by cirkit1 Explorer in Getting Data In 05-03-2014 1 1 | 1 | 1 | |
| | Hi All, I have log files in directory structure like this: /var/log/data/index-a/logfile1.log /var/log/data/index-... by mahesh_ravji1 Explorer in Getting Data In 05-01-2014 0 2 | 0 | 2 | |
| | hey! i want to monitor php. at the moment i use splunk-6.0.2-196940-x64-release. so for this goal i did the followin... by jimmyfallon New Member in Getting Data In 05-01-2014 0 11 | 0 | 11 | |
| | Hi, I should know this at this point, but want to confirm... Is a restart of the indexer required if an updated prop... by a212830 Champion in Getting Data In 05-01-2014 0 3 | 0 | 3 | |
 | Hey There, I have a list of 150 servers which listed in a csv file (lookup table). Here's my current search earliest ... by Raghav2384 Motivator in Getting Data In 05-01-2014 1 6 | 1 | 6 | |
| | When installing a UF on Windows, the installer prompts for sources to forward, including event logs or a path. I put... by bbegyperkspot Explorer in Getting Data In 04-30-2014 0 2 | 0 | 2 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
13 -
blacklist
92 -
configuration
32 -
CSV
209 -
data
502 -
development
5 -
field extraction
564 -
forwarder management
2 -
heavy forwarder
961 -
host
159 -
HTTP Event Collector
444 -
index
544 -
indexer
715 -
inputs.conf
841 -
installation
5 -
intermediate forwarder
145 -
JSON
395 -
Linux
461 -
Mac
30 -
modular input
195 -
monitor
313 -
other
83 -
props.conf
995 -
saved search
2 -
scripted input
249 -
search
1 -
search head
2 -
source
291 -
sourcetype
496 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
325 -
time
204 -
transforms.conf
584 -
troubleshooting
14 -
universal forwarder
1,572 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
596 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
[Puzzles] Solve, Learn, Repeat: Matching cron expressions
This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
Cisco Live 2026 is almost here, and this ...
Data Management Digest – May 2026
Welcome to the May 2026 edition of Data Management Digest!
As your trusted partner in data innovation, the ...
