Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Is it possible to deploy an app from the Splunk master node /master-app/cluster/local to all the peer nodes ?
by
ssankeneni
Communicator
in
Getting Data In
12-05-2012
|
2
|
4
| ||
|
|
I have a requirement where in order for the remote machine to send data over the TCP connection to Splunk, it needs S...
by
rohitgupta
New Member
in
Getting Data In
02-20-2013
|
0
|
1
| ||
|
|
Hello,
I'm new in splunk. Splunk with syslog works correct now. I try test netflow from cisco asa. I set netflow i...
by
popo80
New Member
in
Getting Data In
02-18-2013
|
0
|
1
| ||
|
This is a common issue with the syslog sourceytype. By default it behave differently from the other inputs, the host ...
by
yannK
Splunk Employee
in
Getting Data In
02-20-2013
|
2
|
1
| ||
|
|
Using [monitor://path] Stanza i need to monitor a folder which contains binary data. When i set the props.conf as,
...
by
chimbudp
Contributor
in
Getting Data In
02-20-2013
|
0
|
3
| ||
|
|
I would like to monitor assembly folder in windows. Path :- C: \Windows \assembly
I have set the inputs.conf in Un...
by
chimbudp
Contributor
in
Getting Data In
02-18-2013
|
0
|
8
| ||
|
|
Hi,
Ive been playing with the SEDCMD in my props.conf to anonymize CC data in a log.
Originally I tried this:...
by
doreno
Explorer
in
Getting Data In
02-19-2013
|
0
|
11
| ||
|
|
I want to index only specific fields like error status in an event and discard the rest. How do I set splunk to do th...
by
pdash
Path Finder
in
Getting Data In
02-18-2013
|
0
|
3
| ||
|
|
I know that you can control the Universal Forwarder to grab historical event logs from Windows using "current_only = ...
by
vragosta
Path Finder
in
Getting Data In
02-19-2013
|
0
|
2
| ||
|
|
Anyone know why 5.0.1 UFs are reporting data in with host name of $decideonstartup. Looks like this setting was added...
by
dchodur
Path Finder
in
Getting Data In
01-29-2013
|
1
|
6
| ||
|
|
I need to monitor the Assembly folder in Windows Server : [monitor://C:\Windows\assembly] index=Assembly_monitor
t...
by
chimbudp
Contributor
in
Getting Data In
02-19-2013
|
0
|
4
| ||
|
|
Is there any way to distinguish the various priorities/levels of syslogged messages when viewed from Splunk?
I don't ...
by
NK_1
Path Finder
in
Getting Data In
01-18-2012
|
0
|
3
| ||
|
|
Hey folks,
Long time Splunk fan here. Initially when we started using Splunk, our queries were simple, and so sear...
by
KA_splunk
Explorer
in
Getting Data In
02-14-2013
|
2
|
11
| ||
|
|
I am using a Universal Forwarder to monitor the following directories and files, but somehow it is not routing it to ...
by
tsunamii
Path Finder
in
Getting Data In
02-18-2013
|
0
|
2
| ||
|
|
I've "configured" the Splunk for Cisco IPS application, but I'm getting the following back from the scripted input:
...
by
aart_bos
Loves-to-Learn
in
Getting Data In
02-07-2013
|
0
|
1
| ||
|
|
I have an alert on my windows 2008R2 indexer that calls sendsnmptrap.cmd (see link to script below). My question is i...
by
mship
Path Finder
in
Getting Data In
02-18-2013
|
0
|
1
| ||
|
|
Why time zone in Splunk 5.0.2 for Moscow (Russia) is +3? Must be +4!
by
PaVedme
Engager
in
Getting Data In
02-13-2013
|
1
|
1
| ||
|
|
Hi Everyone.
Perfmon logging used to work for me by placing what should have been in perfmon.conf into inputs.conf...
by
matthewcanty
Communicator
in
Getting Data In
02-15-2013
|
0
|
6
| ||
|
|
I have a database input configured:
[dbmon-tail://spa/dwf_rdfdirector_r]
host = spa
index = emc
interval = auto
...
by
micm
Explorer
in
Getting Data In
01-22-2013
|
0
|
2
| ||
|
|
the nfdump log timestamp is way off. The date is off by more than a month. Every entry is Nov 13 at 3 AM. I have conf...
by
akertis
New Member
in
Getting Data In
12-14-2011
|
0
|
2
| ||
|
|
I have the problem, that the TCP listener on indexer xxpu031 answered not all connections. In the TCP dump below, the...
by
azanoli
Explorer
in
Getting Data In
02-15-2013
|
1
|
7
| ||
|
|
I'm in the middle of a POC of Splunk and would like to start putting my netflow data into it and be able to graphical...
by
Shane
Explorer
in
Getting Data In
10-20-2010
|
0
|
2
| ||
|
|
can you pls explain tag,in all the examples they used index=_internal source=*metrics.log if i want to use .csv file...
by
mgraju
New Member
in
Getting Data In
02-17-2013
|
0
|
1
| ||
|
|
we are in the process of investigating splunk for our IT datacenter.
Does splunk store the old events that occure...
by
mihika
Engager
in
Getting Data In
06-18-2010
|
2
|
4
| ||
|
|
I want to map headers to the data in the csv to search the fields as key=value pair, the sample log is shared below. ...
by
thirumalreddyb
Communicator
in
Getting Data In
02-15-2013
|
0
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
205 -
data
445 -
development
5 -
encryption
1 -
eval
2 -
field extraction
537 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
907 -
host
153 -
HTTP Event Collector
423 -
index
532 -
indexer
687 -
indexing performance
1 -
inputs.conf
815 -
installation
4 -
intermediate forwarder
135 -
introduction
3 -
JSON
381 -
kvstore
1 -
Linux
436 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
182 -
monitor
304 -
monitoring console
1 -
other
29 -
proactive Splunk component monitoring
2 -
props.conf
945 -
regex
5 -
saved search
2 -
scripted input
238 -
search
1 -
search head
2 -
source
286 -
sourcetype
479 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
304 -
time
203 -
transforms.conf
555 -
troubleshooting
15 -
universal forwarder
1,518 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
573 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco
The Defining Technology Movement of Our Lifetime
The advent of agentic AI is arguably the defining technology ...
Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data
In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...
Your summer travels continue with new course releases
Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...
