Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | Hi, I have several forwarders that rsyslog listens on 514 and I set it up so that certain logs go to separate files ... by rabbidroid Path Finder in Getting Data In 10-17-2013 0 5 | 0 | 5 | |
| | [my_fields] REGEX = ^[[nspaces:clientip]]\s++[[nspaces:ident]]\s++[[nspaces:user_id]]\s++[[sbstring:req_time]]\s++[[q... by shangshin Builder in Getting Data In 10-17-2013 1 7 | 1 | 7 | |
| | I don't have a lot of disk space on my indexers. I know that i can reduce the amount of logging and number of metric... by gsawyer1 Engager in Getting Data In 10-17-2013 0 5 | 0 | 5 | |
 | Hello, I'm trying to extract data depending of one word (fail* or success*) from a field that is not always the same... by gnoellbn Explorer in Getting Data In 10-17-2013 0 2 | 0 | 2 | |
| | Hi all, We currently have 4 indexers and 2 search heads running on VMs. We have two more physical servers on their w... by watsm10 Communicator in Getting Data In 10-17-2013 0 3 | 0 | 3 | |
| | How can I make a combo box dependent on another combo box in a form? The contents of the second combo box is depende... by oriches Explorer in Getting Data In 10-17-2013 0 2 | 0 | 2 | |
| | We are running Splunk 4.3.3 (in the process of upgrading but we are stuck on this version for the moment), and one Wi... by smwirt Path Finder in Getting Data In 10-16-2013 0 14 | 0 | 14 | |
| | Hi, Trying (still) to get delimted files properly handled by Splunk, with automatic failed extraction. I followed t... by a212830 Champion in Getting Data In 10-16-2013 0 4 | 0 | 4 | |
| | Hi, I would like to know how to configure Splunk so that for each event that I'm feeding to it the system time is us... by rantravee Path Finder in Getting Data In 10-16-2013 0 2 | 0 | 2 | |
| | Hi all I need to make all universal forwarders to send with its own IP address to the server. I have a deployment se... by hswoo2000 Explorer in Getting Data In 10-16-2013 0 5 | 0 | 5 | |
| | Team so far , is splunk able to monitor how many types of resources ?like flat files,directory etc My requirement i... by kkamatchisundar New Member in Getting Data In 10-16-2013 0 2 | 0 | 2 | |
| | OK, so now I know how to deploy UF on a Citrix Golden Image: http://answers.splunk.com/answers/69715/citrix-golden-im... by reedmohn Communicator in Getting Data In 10-16-2013 0 6 | 0 | 6 | |
| | Hello, Reading in a file via inputs.confg, I have a text file I am reading in. The FIRST instances of reading in th... by daniel333 Builder in Getting Data In 10-15-2013 0 2 | 0 | 2 | |
| | All, I have scripted input from PowerShell coming in nicely. The script can generate 1-100 possible results which a... by daniel333 Builder in Getting Data In 10-15-2013 1 2 | 1 | 2 | |
| | I have a large set of files that I need to index and I need to set the host field based on data contained in the file... by curtisb1024 Path Finder in Getting Data In 10-15-2013 1 3 | 1 | 3 | |
| | Hello, I am installing a Universal Forwarder on a domain controller. In the documentation it says the following: I... by ryanbla Explorer in Getting Data In 10-15-2013 1 1 | 1 | 1 | |
| | We have universal forwarders set up on some machines which are part of an auto-scale group in EC2. In some cases the... by cssean Explorer in Getting Data In 10-15-2013 1 5 | 1 | 5 | |
| | This is a simple question I hope - exactly as stated, if there is an outputs.conf present on the search head, does it... by msarro Builder in Getting Data In 10-15-2013 0 7 | 0 | 7 | |
 | I'm having to use wildcarded stanzas for a lot of my sourcetypes in props.conf, and although I'd like to have the co... by sideview SplunkTrust  in Getting Data In 10-15-2013 2 2 | 2 | 2 | |
| | hi, I'd need some hints regarding the propertiesI should have in in props.conf and transforms.conf so that I have da... by rantravee Path Finder in Getting Data In 10-15-2013 0 9 | 0 | 9 | |
| | Anyone have experience in deploying Citrix servers w/Universal Forwarder installed in a golden image? How do you hand... by reedmohn Communicator in Getting Data In 10-15-2013 0 2 | 0 | 2 | |
| | I have a server forwarding events to splunk that must be configured incorrectly. It's hostname is blank and can be f... by jcarpio9 Engager in Getting Data In 10-14-2013 1 4 | 1 | 4 | |
| | Is there a way to configure regmon-filters.conf such that it captures all Windows registry changes, EXCEPT for one or... by kogane Path Finder in Getting Data In 10-14-2013 1 9 | 1 | 9 | |
| | hello, Using a custom script input I can obtain some data from a particular network resource. I would like to know i... by rantravee Path Finder in Getting Data In 10-14-2013 0 2 | 0 | 2 | |
| | How do I setup splunk to purge anything older than 7 days? by tb5821 Communicator in Getting Data In 10-14-2013 0 1 | 0 | 1 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
add-on
1 -
administration
13 -
blacklist
92 -
configuration
32 -
CSV
208 -
data
482 -
development
5 -
eval
2 -
field extraction
558 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
947 -
host
158 -
HTTP Event Collector
440 -
index
539 -
indexer
707 -
indexing performance
1 -
inputs.conf
832 -
installation
5 -
intermediate forwarder
143 -
introduction
3 -
JSON
392 -
kvstore
1 -
Linux
454 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
191 -
monitor
310 -
monitoring console
1 -
other
55 -
proactive Splunk component monitoring
2 -
props.conf
980 -
regex
5 -
saved search
2 -
scripted input
244 -
search
1 -
search head
2 -
source
291 -
sourcetype
494 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
319 -
time
204 -
transforms.conf
578 -
troubleshooting
15 -
universal forwarder
1,552 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
587 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Application management with Targeted Application Install for Victoria Experience
Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...
Index This | What goes up and never comes down?
January 2026 Edition
Hayyy Splunk Education Enthusiasts and the Eternally Curious!
We’re back with this ...
Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination
The Power of Two: Splunk + Cisco at "Ludicrous Scale"
You know Splunk. You know Cisco. But have you seen ...
