Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | Hi to minimize the size of a index I would like to filter events for status 200 This is my config files: inputs.con... by jmallorquin Builder in Getting Data In 11-27-2013 3 9 | 3 | 9 | |
 | We want to trace the access to some files on a windows server. After switching on the audit log, we got the informati... by s_rieger New Member in Getting Data In 11-27-2013 0 1 | 0 | 1 | |
| | Newbie here - Just evaluating Splunk. I set up my source to watch a directory and my source type filtering by file... by levinro Engager in Getting Data In 11-26-2013 1 2 | 1 | 2 | |
| | Hello everyone. I wanted to see if someone has previously configured to send logs by SCP Ironport, tried to do but di... by jrodriguezap Contributor in Getting Data In 11-26-2013 0 6 | 0 | 6 | |
| | Hi, We have a splunk light forwarder monitoring a file that grows in excess of 5GB a day before rolling over. The... by g3s1oa Explorer in Getting Data In 11-26-2013 3 1 | 3 | 1 | |
| | I have log files that do not have a key - value format. The first part of each event is like this: 2013/11/25-17:09:... by src053 Engager in Getting Data In 11-26-2013 0 4 | 0 | 4 | |
| | In our splunk deployment, we have about 100 universal forwarders installed on PCs and forward data to a splunk server... by wanling Path Finder in Getting Data In 11-26-2013 0 2 | 0 | 2 | |
| | Hi, I only have the option to add Data Inputs from single file. how do i load a directory full of logs? by shayhk Explorer in Getting Data In 11-26-2013 0 1 | 0 | 1 | |
| | I am getting this message on my indexer and search head. First i set 5000Mb after getting this error i set this to ... by rameshlpatel Communicator in Getting Data In 11-26-2013 0 6 | 0 | 6 | |
| | Splunkweb Enables and provides a easier medium to Setup or Change the Configuration settings in Splunk Indexer/ Searc... by chimbudp Contributor in Getting Data In 11-25-2013 0 1 | 0 | 1 | |
| | Hi All, I am collecting Perfmon data via the Splunk_TA_windows app and for some reason the time stamp is not being p... by rturk Builder in Getting Data In 11-25-2013 0 3 | 0 | 3 | |
| | Hey, I am trying to monitor changes to specific, sensitive folders on my samba file share. Therefore, the fschange f... by ESIMatNeforce Path Finder in Getting Data In 11-25-2013 0 1 | 0 | 1 | |
 | I installed Splunk Universal forwarder on Windows (2008 rc2), but when I tried to upgrade or to uninstall, it failed.... by mataharry Communicator in Getting Data In 11-25-2013 1 3 | 1 | 3 | |
| | I have a CSV file which has a header. I want to load this in SPLUNK and want to perform searches using different fiel... by sanujss Explorer in Getting Data In 11-25-2013 0 4 | 0 | 4 | |
| | Hi! I would like to ask question if something like below is possible. I already have a index A with sourcetype A ... by yuwtennis Communicator in Getting Data In 11-25-2013 0 2 | 0 | 2 | |
| | I have an indexer that seems to be having an issue keeping up with bundles with Splunk 5.0.5. I have been though S.O.... by ShaneNewman Motivator in Getting Data In 11-24-2013 0 3 | 0 | 3 | |
| | Hopefully others might find this helpful and I'm certainly open to feedback. Some of the guts of the solution can be ... by Runals Motivator in Getting Data In 11-23-2013 4 9 | 4 | 9 | |
| | My data looks like this: { EC_reference="C0000001", Entity_name="Charter 88", Entity_type="Third Party", Regulated_d... by himynamesdave Contributor in Getting Data In 11-22-2013 0 9 | 0 | 9 | |
| | Prior to upgrading to Splunk 6 I had my props.conf configured to specify TZ's for certain host. Since upgrading to sp... by trumpjk Explorer in Getting Data In 11-22-2013 0 1 | 0 | 1 | |
| | Has anyone seen this before? PDF server status page generates a pdf as expected and it seems to work, the error belo... by tuxford Path Finder in Getting Data In 11-22-2013 0 12 | 0 | 12 | |
| | I realize this will incur twice the license usage...but lets ignore that fact for a moment. How can I get an event i... by juniormint Communicator in Getting Data In 11-22-2013 0 7 | 0 | 7 | |
| | Need help, i have log file kind of: "INT","INT","INT","VARCHAR","""VARCHAR"" ","VARCHAR","VARCHAR","VARCHAR",VARCHAR... by sarumjanuch Path Finder in Getting Data In 11-22-2013 0 1 | 0 | 1 | |
| | We have a remote windows ftp server that splunk is pulling logs off and I am not able to get it to recognize the remo... by chrisw9808 Engager in Getting Data In 11-22-2013 0 1 | 0 | 1 | |
 | Hi, Is it possible that I have two Splunk servers running one at my office location which has historical data and ot... by harshal_chakran Builder in Getting Data In 11-21-2013 0 1 | 0 | 1 | |
| | Hi, I am not able to configure the ssl connections between the forwarder and indexer. The splunkd logs on both the i... by garima_chauhan Path Finder in Getting Data In 11-21-2013 1 8 | 1 | 8 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
13 -
blacklist
92 -
configuration
33 -
CSV
210 -
data
504 -
deployer
1 -
development
5 -
field extraction
564 -
forwarder management
2 -
heavy forwarder
964 -
host
159 -
HTTP Event Collector
445 -
index
544 -
indexer
716 -
indexer clustering
1 -
inputs.conf
844 -
installation
5 -
intermediate forwarder
145 -
JSON
395 -
Linux
461 -
Mac
30 -
modular input
195 -
monitor
314 -
other
83 -
props.conf
996 -
saved search
2 -
scripted input
249 -
search
1 -
search head
2 -
search head clustering
1 -
source
292 -
sourcetype
497 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
325 -
time
204 -
transforms.conf
585 -
troubleshooting
14 -
universal forwarder
1,576 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
597 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Casting Call: Compete in Cyber Games
Lights, Camera, SecOps: Apply to Compete in Cyber Games
Think you have what it takes to beat the clock? ...
Announcing Modern Navigation: A New Era of Splunk User Experience
We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...
How Edge Processor's Durable Queue Works
Edge Processor sits in one of the most consequential places in any Splunk pipeline: between your data sources ...
