Getting Data In

Community Activity

How to ingest multiple line JSON I have a JSON file that is formatted like this { "meta": { "serverTime": 1692112678688.699, "agen... by JayKay1980 New Member in Getting Data In 09-11-2023 0 0	0	0
How to Monitor Linux ssh connection with "super user"? Hello Splunkers !I am looking for a way to monitor and retrieve the user that logged into my Linux machine, but only ... by GaetanVP Contributor in Getting Data In 09-11-2023 0 0	0	0
Why my Index=”main” host=* command no results I am learning splunk for the first time in my course, I had this task of setting up 4 VMs through VMware workstation ... by holowolf3500 Loves-to-Learn in Getting Data In 09-10-2023 0 1	0	1
How can I index data from a CSV file with 2 header lines Hi all,I have CSV files (they are exports from the Garmin R10 launch monitor session data via the Garmin Golf app) t... by dajomas Path Finder in Getting Data In 09-10-2023 0 1	0	1
Why is host=myhost giving no results? Sorry for the complete noob question. But I have had this splunk project dropped on me and I need to spin up fast. ... by iiooiiooiioo Explorer in Getting Data In 09-09-2023 0 9	0	9
Splunk Forwarder: Why is there no listing of the Win10 VM in either hosts or source list? I have installed the splunk forwarder on a Windows 10 VM and have splunk installed on a Debian VM. I have restarted t... by Aus01 New Member in Getting Data In 09-09-2023 0 2	0	2
How to convert date format? Hi ,In splunk query I need to convert date format as below .Current format - 07/09/23Required Format : 2023-09-07 by dhiraj Loves-to-Learn Lots in Getting Data In 09-08-2023 0 2	0	2
Clone an event based on a indexed field Hi all,We have a source which comes in via HEC into an index.The sourcetyping currently is dynamic.We then route data... by duijva1 Engager in Getting Data In 09-07-2023 0 0	0	0
How can I create an HTTP Event Collector and assign/create indexes to it programmatically We are moving into a container environment and plan to manage the logs via Splunk Cloud. We'd like to be able to pro... by NanSplk01 Communicator in Getting Data In 09-07-2023 0 0	0	0
How to drop data from a HEC Collector? Hi, I'm trying to isolate why I'm not able to drop data from a HEC Collector endpoint. I have some docker logs I d... by skirven Communicator in Getting Data In 09-07-2023 0 6	0	6
Looking for the Hostname or IP of splunk cloud HelloI have a restricted rsyslog client. I can there only specify a Hostname or IP and port as target to send the sys... by Sponi Engager in Getting Data In 09-07-2023 0 2	0	2
Automatic Load Balancing Hello,I set up several hosts in Forwarding and Receiving section (different servers and ports) to forward logs. I can... by Adpafer Loves-to-Learn Everything in Getting Data In 09-07-2023 0 4	0	4
Data Ingest issues Howdy Splunkers, Working on my Splunk deployment and ran into a funky issue. I am ingesting Palo Alto FW and Meraki n... by ChristianF Explorer in Getting Data In 09-06-2023 0 4	0	4
Field extraction Hi Splunkers! I need to extract the specific field which dosent consists of sourcetype in logs,Fields to extract - ... by smanojkumar Contributor in Getting Data In 09-06-2023 0 5	0	5
Json source type produces duplicated data Hello,I'm sending JSon data to the Http Event collector. When I exectute searches, all the non-metadata fields have d... by Flobzh Explorer in Getting Data In 09-05-2023 0 4	0	4
What is the default compression method in the outputs.conf file In outputs.conf you can configure compressed = <boolean> to compress the data, but the documentation doesn't specify ... by legaldan Explorer in Getting Data In 09-05-2023 0 2	0	2
How do I Download and Setup DB Connect? Hello again, I am back to ask for your help, I feel that DB Connect is a headache, I am very confused about its con... by splunkcol Builder in Getting Data In 09-05-2023 0 2	0	2
How to forward indexes to different port of the same server? Dear Support, I have 2 indexes (indexA, indexB) and one receiving server with 2 different ports (10.10.10.10:xx, 10.... by Adpafer Loves-to-Learn Everything in Getting Data In 09-05-2023 0 9	0	9
How to use Lookup table to analyze events? I created a lookup table for blacklisted DNS queries. I need a query that uses the lookup table to see if domains in ... by waJesu Path Finder in Getting Data In 09-05-2023 0 9	0	9
Is it possible to have multiple hosts for one LDAP Strategy? Hi all, We have Splunk connected to 5 LDAP domains and each one with at least 10 servers. Today Splunk is pointing ... by fjmelo Engager in Getting Data In 09-05-2023 1 3	1	3
Cisco Mobility Express data into Splunk Hi.I've tried to get Splunk to understand syslog messages coming from a Cisco Mobility Express setup.Mobility Express... by amuso Loves-to-Learn in Getting Data In 09-04-2023 0 0	0	0
How to send data to two different Cloud instances? Hi folks, I have a HF already sending data to one cloud instance, however I'd like to start sending data to a diffe... by splunk_luis12 Path Finder in Getting Data In 09-04-2023 0 5	0	5
How to use props.conf to parse json file in splunk HiI am new to splunk. I set up a single-site cluster to parse a JSON-formatted log. I use cm in the path of /opt/splu... by camellia Engager in Getting Data In 09-03-2023 0 1	0	1
deployment server not updating inputs.conf on clients When pushing the Windows add on for Splunk using a deployment server, my inputs.conf files on the clients are not upd... by pc1 Path Finder in Getting Data In 09-01-2023 0 5	0	5
Deployed apps to Windows Forwarders are malformed Sometimes after an app has a change made to it when it is deployed to our Universal Forwarders on Windows computers t... by nathanhfraenkel New Member in Getting Data In 09-01-2023 0 1	0	1