Getting Data In

Community Activity

Rangemap on multiple fields? Is it possible? Hi, I have the following in a table that I'd like to do a rangemap on for each - same ranges, just want to do it all... by edenzler Path Finder in Getting Data In 06-23-2013 0 3	0	3
Enable receiving on Splunk for use with Universal Forwarder Hey, I'm missing something rather basic here. If Splunk is set by default to listen on port 8089, why when running t... by xcalibur New Member in Getting Data In 06-23-2013 0 1	0	1
fschange not working in high load setups Hi, We have two kinds of setups. One setup for development where we inject ~2-5 GB data per day. Another one is for ... by strive Influencer in Getting Data In 06-23-2013 0 2	0	2
Can we run multiple universal forwarder instance on one Windows server? We have situation where other team want to manage their own instance of universal forwarder on the same Windows box. ... by nikhilagrawal Path Finder in Getting Data In 06-22-2013 0 3	0	3
Newbie Question on nullQueue Hello Everyone, I know there are questions similar to mine, but I cannot seem to transform them into a solution for ... by millerjc123 New Member in Getting Data In 06-21-2013 0 5	0	5
Filtering Events I am trying to filter events, and am not having any luck. Log info in Splunk: LogName=System SourceName=Microsoft-Wi... by jdonovan New Member in Getting Data In 06-21-2013 0 6	0	6
accessing saved report data in json/xml from Splunk RESTful API I have tried to access a saved report through a browser URL using Splunk's RESTful API. I cannot seem to accomplish t... by tommyp1972 New Member in Getting Data In 06-21-2013 0 3	0	3
Underscores in inputs.conf...HELP! Let's say I have the following in my inputs.conf file: [monitor:///splunk/splink/fish/abc_qa/logs/] whitelist = def... by jcmaynard Explorer in Getting Data In 06-21-2013 0 9	0	9
Index issue - new logs - iis-2 Hi, I have splunk sitting on a server indexing log files from a dir \weblog When I initially added the folder all t... by DanielFordWA Contributor in Getting Data In 06-21-2013 0 4	0	4
Question about time searches Hello splunk community, I'm brand new at using the software and I seem to run into a point that I cant find any docum... by Antioch Path Finder in Getting Data In 06-20-2013 0 2	0	2
Integration of Imperva Database Activity Monitor (DAM)? Dear experts, would it make sense to integrate Splunk and Imperva DAM? Has anybody done it, who is willing to share h... by Paolo_Prigione Builder in Getting Data In 06-19-2013 2 1	2	1
Summary Index or not? All, We have Windows and Linux BIND DNS servers logging into one index in Splunk. Because of the way Windows logs do... by tradecraft1914 Explorer in Getting Data In 06-19-2013 0 3	0	3
Can you override host for an input? I have an input like the below. When I search for events from that input they have host=127.0.0.1. The app sending ... by juniormint Communicator in Getting Data In 06-19-2013 0 1	0	1
Event detection within a standard window? I need to perform a search that spans a days worth of logs looking for 5 identical events in a one hour window. Break... by jtyrrell New Member in Getting Data In 06-19-2013 0 2	0	2
combine search results with external data Hello, I have csv file with geo coordinates of my internal ip's. I dont know how to combine it with google maps. cou... by janfabo Explorer in Getting Data In 06-18-2013 1 4	1	4
Proper syntax for urls.conf with multiple URLs Can someone clarify the syntax for multiple urls in the urls.conf file please for the WebMon? The app is only picking... by sliderCO Explorer in Getting Data In 06-18-2013 0 5	0	5
Univeral forwarder not forwarding I have a problem with a universal forwarder as i configured on a domain controller to use with splunk app for active ... by systemsatpayzon Path Finder in Getting Data In 06-17-2013 0 6	0	6
Handle log rolling and index today's log file and yesterday's log file we have a scenario where we roll logs everyday. we want splunk to index log file for today and log file for yesterday... by samitroy New Member in Getting Data In 06-17-2013 0 1	0	1
Using Splunk as a log forwarder itself? I'm looking at Splunk to possibly replace a Kiwi Syslog server, however I don't see one of the features that Kiwi pro... by gjones4 New Member in Getting Data In 06-17-2013 0 2	0	2
Getting Data into iseries app I have multiple feeds coming into UDP:514, from this input I have ASA, ESA, and as400 data coming in. I have recentl... by jarjoh42 Path Finder in Getting Data In 06-17-2013 0 3	0	3
Splunk JMS Modular Input v1.2.2 I believe I have the JMS Modular Input app installed and running. How do I configure this to monitor a JMS queue on a... by braunra New Member in Getting Data In 06-17-2013 0 3	0	3
Windows Event logs in syslog format All our windows servers are sending security event logs to a central syslog server - they are not in Windows event lo... by wcgrech New Member in Getting Data In 06-14-2013 0 1	0	1
Do I need to restart a license slave if I change license master? If I need to move to another license master, do I have to restart my indexer? by dart Splunk Employee in Getting Data In 06-14-2013 0 1	0	1
Is Splunk the right tool for ESXTOP? Hello All, I'm outputting VMware esxtop data to a csv and was wondering if splunk was the right tool to index and us... by dbeez New Member in Getting Data In 06-13-2013 0 3	0	3
Index time not same as log message time I just setup another splunk server. Foolishly I forgot to turn on NTP and the system clock was way off. The first chu... by jalfrey Communicator in Getting Data In 06-13-2013 0 3	0	3