Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | If I need to monitor 2 different file types in the same folder and send them to different indexes, how do I do that? by splunkIT Splunk Employee  in Getting Data In 04-18-2013 1 1 | 1 | 1 | |
| | I am using the following to clean up output: rex mode=sed field=search_google2 "s/\%20/ /g";"s/\%5B/[/g" | rex mode=... by mcbradford Contributor in Getting Data In 04-18-2013 0 1 | 0 | 1 | |
| | Everytime a email alert is sent, it contains a CSV file (as attachment) that only contains 101 rows even though the a... by deyeo Path Finder in Getting Data In 04-17-2013 0 1 | 0 | 1 | |
| | For java sdk, output mode as json, I am getting fields sent from splunk and their values as json. But how ever is the... by 1234testtest Path Finder in Getting Data In 04-17-2013 0 3 | 0 | 3 | |
| | 以下のような日本語を含むタイムスタンプをSplunkに認識させるにはどのような設定が必要ですか？ 金 3月 22 11:24:40 2013: Total time in the report period (60.000671... by msgtrk Path Finder in Getting Data In 04-16-2013 0 3 | 0 | 3 | |
| | Hi, When I execute command splunk list monitor: I see that there are two different types of monitoring: Monitored di... by lqiao Explorer in Getting Data In 04-16-2013 1 1 | 1 | 1 | |
| | I have made the UF as the deployment client. In the deployment server I have created an app that have the inputs.conf... by Splunk_U Path Finder in Getting Data In 04-16-2013 0 2 | 0 | 2 | |
| | Sorry in advance to the newbie question but, is there a way to import a list of IP addresses into splunk search query... by TucoRameriz Explorer in Getting Data In 04-16-2013 1 3 | 1 | 3 | |
| | Hi, I am trying to construct an input.conf stanza + whitelist/blacklist rule to look for the following: accept all *... by virtualpony Path Finder in Getting Data In 04-16-2013 1 3 | 1 | 3 | |
| | Hi, I like the method of indexing files as they appear in the syslog-ng log directory where each host goes to a di... by Parameter Explorer in Getting Data In 04-16-2013 1 5 | 1 | 5 | |
 | I have a large number of Universal Forwarders that forward Apache access logs. On my systems, the apache access logs ... by Branden Builder in Getting Data In 04-16-2013 0 2 | 0 | 2 | |
| | Hello, I want to put several single in a same column so I add the attribut grouping in my xml file but I have a prob... by LauraBre Communicator in Getting Data In 04-16-2013 0 1 | 0 | 1 | |
| | How can I verify if my universal forwarder is receiving the data on the UDP port ? I don't see any thing in my splunk... by ssankeneni Communicator in Getting Data In 04-15-2013 0 3 | 0 | 3 | |
| | I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advi... by diegosainz Path Finder in Getting Data In 04-15-2013 0 1 | 0 | 1 | |
| | is it possible to define the source and sourcetype fields to match a folder name? On each server our log structure ... by mhorn New Member in Getting Data In 04-15-2013 0 12 | 0 | 12 | |
| | Hello, Here at my company we have one search head and three indexers.... We have a standalone server that has an Hea... by ivantn21 Explorer in Getting Data In 04-15-2013 1 5 | 1 | 5 | |
| | I am monitoring a series of directories. I want to blacklist any (sub)directories that is starting with a ".". i.... by vincenty Explorer in Getting Data In 04-15-2013 0 2 | 0 | 2 | |
| | Hello, I'm new to Splunk. On my server (Linux) I have splunk and a internal web site. Now I need to monitor the Wordp... by mirza94 Engager in Getting Data In 04-15-2013 0 2 | 0 | 2 | |
| | Can anyone give me any hint about this? I have splunk installed in ServerB, Windows server 2008 and i have MachineA, ... by limwesiang Engager in Getting Data In 04-14-2013 0 3 | 0 | 3 | |
| | May I know if there is any way to anonymise/mask the data in our search results by using our own custom commands, by ... by sarahh Engager in Getting Data In 04-13-2013 0 1 | 0 | 1 | |
| | I have a datacenter with a single Splunk server indexing data from all the local servers. I just updated all the sou... by jradkowskiAAMC Explorer in Getting Data In 04-12-2013 5 4 | 5 | 4 | |
| | Terminology might be off, but I'll give the exact example: "The session setup from computer 'NOCSERVER_A123' failed ... by corydm New Member in Getting Data In 04-12-2013 0 3 | 0 | 3 | |
| | We have a custom application log file which looks something like below, this file is not getting indexed with the 1s... by yogonline Engager in Getting Data In 04-12-2013 0 3 | 0 | 3 | |
| | I extracted the host names wrong, and now I have extra names in my Splunk. Example: Server01 vs. Server1 and Serv... by lain179 Communicator in Getting Data In 04-12-2013 0 6 | 0 | 6 | |
| | I'm taking iis logs from an Exchange server via a forwarder on that system. Originally I had TZ = GMT on the etc/syst... by wrangler2x Motivator in Getting Data In 04-12-2013 0 1 | 0 | 1 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
208 -
data
472 -
development
5 -
encryption
1 -
eval
2 -
field extraction
551 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
936 -
host
155 -
HTTP Event Collector
434 -
index
538 -
indexer
703 -
indexing performance
1 -
inputs.conf
829 -
installation
5 -
intermediate forwarder
141 -
introduction
3 -
JSON
389 -
kvstore
1 -
Linux
451 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
47 -
proactive Splunk component monitoring
2 -
props.conf
973 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
491 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
315 -
time
204 -
transforms.conf
575 -
troubleshooting
15 -
universal forwarder
1,546 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
586 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Index This | Why did the turkey cross the road?
November 2025 Edition
Hayyy Splunk Education Enthusiasts and the Eternally Curious!
We’re back with this ...
Enter the Agentic Era with Splunk AI Assistant for SPL 1.4
🚀 Your data just got a serious AI upgrade — are you ready?
Say hello to the Agentic Era with the ...
Feel the Splunk Love: Real Stories from Real Customers
Hello Splunk Community,
What’s the best part of hearing how our customers use Splunk? Easy: the positive ...
