Getting Data In

Getting Data In
Community Activity
cramasta
I have a question about how priority's work in a single props.conf file. If i have the two stanzas below and I index...
by cramasta Builder in Getting Data In 05-16-2013
0 5
0
5
rjordan00
I'm evaluating Splunk for our syslog needs. One of our final requirements is to have the ability to forward syslog me...
by rjordan00 Engager in Getting Data In 05-16-2013
2 4
2
4
foomanjee
Hello, I have what may or may not be a bit of a unique issue regarding extracted fields. We've got a few webservers ...
by foomanjee Explorer in Getting Data In 05-16-2013
1 4
1
4
Ant1D
Hi, I have set up a Splunk environment in which several applications will be sending data to a collection of indexer...
by Ant1D Motivator in Getting Data In 05-16-2013
0 4
0
4
fongkh76
Hi, I am new to Splunk and have just configured a universal forwarder on a remote windows server in order to forward...
by fongkh76 New Member in Getting Data In 05-16-2013
0 8
0
8
Kai191
I would like to know what is the command filter out repeat source port if I wanna analyse my log based on number of p...
by Kai191 New Member in Getting Data In 05-15-2013
0 2
0
2
Alan_Bradley
Is there an internal log message that will tell me when Splunk has finished indexing a file?
by Alan_Bradley Path Finder in Getting Data In 05-15-2013
10 6
10
6
andyk
Is it OK to do like this: [monitor://E:\Data\pnlog\createsession\] soucetype = createsession recursive = false host ...
by andyk Path Finder in Getting Data In 05-15-2013
0 4
0
4
alexl1
hi, when making changes to props files, which props files in splunk do not require restarting splunk and take effect ...
by alexl1 Path Finder in Getting Data In 05-15-2013
0 8
0
8
mjcocat
Running v5.0.2 I've added a Syslog UDP source on port 514, and enabled DNS lookup via the advanced menu. It works gr...
by mjcocat New Member in Getting Data In 05-15-2013
0 1
0
1
ppurokit
I have a dashboard which has some 6 items as part of it. I have a scheduled to email the dashboard every 24 hours. ...
by ppurokit Path Finder in Getting Data In 05-15-2013
0 1
0
1
Dark_Ichigo
I have no idea what I missing here, just no idea and I have to admit, its killing me inside, I have been stuck on thi...
by Dark_Ichigo Builder in Getting Data In 05-14-2013
0 2
0
2
sonicZ
I would like to weight certain indexers more then others as some of my indexers are older, and some are beefy new box...
by sonicZ Contributor in Getting Data In 05-14-2013
0 1
0
1
shivanshuk
Hi Splunk Team, We have installed splunk tool on a windows server 2003 machine say A and Splunk forwarder on another...
by shivanshuk Explorer in Getting Data In 05-14-2013
0 6
0
6
beebeandwer
I find that the search id is changes as time. I am not sure why it happen and how long dose it change once.
by beebeandwer Path Finder in Getting Data In 05-14-2013
0 4
0
4
csclement
Hi, I am wondering what are the pros and cons of the following two logging setups: All hosts run rsyslog and forwar...
by csclement Engager in Getting Data In 05-14-2013
1 3
1
3
philyeo
Hi, I have a single licensed indexer running on a server. I also have installed a universal forwarder to collect an...
by philyeo Explorer in Getting Data In 05-13-2013
0 11
0
11
beebeandwer
curl -k -u alice:pass https://localhost:8089/alice can return data. why there is an error message "404-not found" cur...
by beebeandwer Path Finder in Getting Data In 05-13-2013
0 1
0
1
Ricapar
I'm putting together a large environment, so I'm hoping to get this sorted out before I dig myself into a hole. I ha...
by Ricapar Communicator in Getting Data In 05-13-2013
0 1
0
1
asarolkar
Currently splunk provides for an out-of-the-box way of looking at Memory usage for all hosts that are being monitored...
by asarolkar Builder in Getting Data In 05-13-2013
0 1
0
1
jmheaton
Is it possible to go from a linux splunk instance to a windows splunk instance while retaining all previous index dat...
by jmheaton Path Finder in Getting Data In 05-12-2013
0 3
0
3
Parameshwara
multikv.conf [testmultikv] pre.linecount = 1 header.linecount = 1 header.tokens = _tokenize_, -1, "1" body.tok...
by Parameshwara Path Finder in Getting Data In 05-12-2013
1 4
1
4
ajaybguthi
Hi, Do we have a fail over capability for any Splunk forwarders? like if one forwarder goes down the other one will...
by ajaybguthi Explorer in Getting Data In 05-10-2013
1 4
1
4
aperepel
The doc for the /jobs/export mentions the 'rf' parameter (v5.0.2). However, it is ignored by the REST endpoint. E.g. ...
by aperepel Engager in Getting Data In 05-10-2013
0 1
0
1
robtheorg
Recently deployed a Cloud-based email gateway, and after a couple of hiccups, now being asked to put some monitoring ...
by robtheorg New Member in Getting Data In 05-10-2013
0 2
0
2
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...
Top Solution Authors