Getting Data In

Community Activity

splunk why must XML sources be so complicated? I have searched splunkbase for a complete example of how to build an XML as an input and split the XML up where it ne... by zenSplunk Explorer in Getting Data In 06-05-2012 5 7	5	7
IIS Sourcetype I have several IIS servers forwarding over logs using the universal forwarder. I modified the inputs.conf on each se... by Boell Engager in Getting Data In 06-05-2012 1 3	1	3
Forwarder not indexing I have one Linux indexer and 2 Linux forwarders. I just moved my indexer to a new server and have everything set up ... by rcovert Path Finder in Getting Data In 06-05-2012 0 3	0	3
forwarder but getting error ,Could not send data to output queue hi i have installed a universal forwarder but getting this error and not seeing any monitoring files data in splunk ... by kml_uvce Builder in Getting Data In 06-05-2012 1 2	1	2
Sourcetype renaming itself! ok. so i uploaded this log once. let's call it logA.csv with sourcetype: temp the monitor looks something like this:... by attgjh1 Communicator in Getting Data In 06-05-2012 0 3	0	3
Newbie question - can't get Splunk to locate the timestamp in redis log file The following settings don't seem to be able to tell Splunk to locate the timestamp, although I have tried using the ... by socalvin New Member in Getting Data In 06-04-2012 0 3	0	3
Importing the Splunk MIB to CA Spectrum 9.2 Hi Has anyone successfully imported the Splunk MIB ino CA Spectrum 9.2 ? when we try Spectrum gives the following er... by davidcollins Explorer in Getting Data In 06-04-2012 1 4	1	4
Kiwi and Splunk Hi guys, I've tried several transformations and even field extractor but I can't get Splunk to extract the hostname ... by ihoffmann_wth New Member in Getting Data In 06-04-2012 0 1	0	1
Dealing with a few million little log files We're looking to use Splunk to index our application logs; But the application creates a separate log file for each p... by ecnausysadm Explorer in Getting Data In 06-04-2012 3 9	3	9
wmi data through forwarder How to configure WMI in my remote machine 64 bit. need to get wmi data from remote machine to splunk server through s... by vaibhavbeohar Path Finder in Getting Data In 06-04-2012 0 1	0	1
Splunk automatically breaking log entries after 100 lines. I am trying out Splunk and facing an issue. I have some large log entries in my log file, say 250 lines and I have de... by tmail037 Engager in Getting Data In 06-02-2012 1 1	1	1
is crcSalt deprecated? I'm running Splunk 4.3.1 build 119532. I'm getting errors at startup saying that the crcSalt = line in props.conf m... by responsys_cm Builder in Getting Data In 06-01-2012 0 2	0	2
Time comparsion in search I have 2 fields, start_time and end_time in the search result. When I change the time window in the search bar, it on... by shangshin Builder in Getting Data In 06-01-2012 0 8	0	8
forwarder configs the universal forwarder was installed on a server to send info to splunk. We don't see any traffic coming from the fo... by teagerton New Member in Getting Data In 06-01-2012 0 1	0	1
Load balancing and queuing Hello there, I'm deploying a Splunk environment with two forwarders and two indexers. I've got a primary indexer and... by Mahieu Communicator in Getting Data In 06-01-2012 4 1	4	1
Location of "Remote performance monitoring" configs Where are the conf files that handle setting up Remote performance monitoring? I would like to take the settings tha... by rmcdougal Path Finder in Getting Data In 06-01-2012 0 1	0	1
csv timestamp Hi, I'm working on adding some csv data into splunk, and while some data looks ok, some other data is being bunched ... by a212830 Champion in Getting Data In 06-01-2012 0 1	0	1
Issues with Splunk trying to open a file during a copy process Customer is using a script that extracts the logs from the local SQL instance into a text file. When the extraction i... by dshakespeare_sp Splunk Employee in Getting Data In 06-01-2012 1 1	1	1
Slow indexing? Simple question here: ive been logging several logs recently. (often exceeding the 500mb cap) however, the indexing ... by attgjh1 Communicator in Getting Data In 05-31-2012 0 4	0	4
Universal Forwarder license requirements Folks, I was wondering if "Universal Forwarder" requires license to be installed on a Solaris syslog server? Thanks! by ashafiee Explorer in Getting Data In 05-31-2012 0 1	0	1
Question about blacklist entry I want to exclude all files that contain some keyword from splunk forwarder, I have added an entry in prop.conf. [mo... by jangid Builder in Getting Data In 05-31-2012 0 2	0	2
How to quick and simple remove the host and all his logs from SPLUNK ? Hi, I've got a problem. There is no way to remove the host from splunk? No DELETE button and confirmation, NOTHING... by twieczorkowski Explorer in Getting Data In 05-30-2012 0 1	0	1
TIME_PREFIX I have an autosys log with 4 columns (JobName\|Start\|End\|Status) and would like to add them in splunk. Check_Job\|05/2... by shangshin Builder in Getting Data In 05-30-2012 0 7	0	7
Windows Eventlog Not being forwarded We use UF to forward events from a group of servers to our indexers. We also use deployment server to ensure consist... by richnavis Contributor in Getting Data In 05-29-2012 0 1	0	1
multiple syslog servers question Hi everyone, I have a question about setting up Splunk to record syslog messages from 2 different syslog servers. ... by boeckelr New Member in Getting Data In 05-29-2012 0 1	0	1