Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I have files in CP866 encoding. For indexing them in Splunk i made _russian-CP866.ngram file and changed props.conf t...
by
andrey2007
Contributor
in
Getting Data In
10-27-2011
|
0
|
2
| ||
|
|
Hi,
I have a small lab where there is a heavy forwarder. I can/want to perform transformation on Meta info at Heav...
by
rahiparikh
Explorer
in
Getting Data In
10-26-2011
|
0
|
4
| ||
|
|
FTP download is the only way this particular system is allowing us to access its logs. Files are dumped into the FTP ...
by
Jason
Motivator
in
Getting Data In
10-14-2011
|
0
|
6
| ||
|
|
I'm getting following error while starting splunkforwarder after updating inputs.conf under splunkforwarder. These ar...
by
zservati1
New Member
in
Getting Data In
10-25-2011
|
0
|
11
| ||
|
|
I have updated the inputs.conf under /opt/splunkforwarder/etc/system/local, but after restarting splunk I'm getting t...
by
zservati1
New Member
in
Getting Data In
10-25-2011
|
0
|
1
| ||
|
|
I have access to shared folder in my network. I want to get logs for Splunk from this folder. How can i make it? May ...
by
andrey2007
Contributor
in
Getting Data In
10-25-2011
|
1
|
5
| ||
|
|
I'm looking for a way to monitor several router and several interfaces (physical, tunnel...).I need to extract status...
by
bizza
Path Finder
in
Getting Data In
10-21-2011
|
0
|
3
| ||
|
|
We are failing to get events indexed with the following topology: Splunk 4.2 receiving compressed events over the int...
by
grahampoulter
Path Finder
in
Getting Data In
03-18-2011
|
1
|
5
| ||
|
|
If Splunk Crashes will I lose everything that was being indexed in the Hot Bucket?.....is it safe to configure Splunk...
by
Dark_Ichigo
Builder
in
Getting Data In
10-24-2011
|
1
|
1
| ||
|
|
Here's the situation I'm trying to muddle through:
We have a production server that inputs.conf is monitoring, all...
by
hharvey
Explorer
in
Getting Data In
10-21-2011
|
0
|
2
| ||
|
|
Hi,
Today I've read the page(docs) all about "splunk" , and listened to few of videos and it's great , impressed ,...
by
kiranreddy
New Member
in
Getting Data In
10-20-2011
|
0
|
3
| ||
|
|
Hello,
On my Windows box, I've added a new monitor stanza in my local inputs.conf file. The config is:
[monitor...
by
ktang
Explorer
in
Getting Data In
10-20-2011
|
0
|
6
| ||
|
|
My firewall is using syslog-ng to send logs to my log server over TCP on port 514. In Splunk>>Manager>>Data inputs>>T...
by
mmather67
Path Finder
in
Getting Data In
10-20-2011
|
0
|
6
| ||
|
|
Can Splunk be used to collect data from printers (and other network devices like routers, switches).
Sorry if this...
by
tympaniplayer
Path Finder
in
Getting Data In
10-20-2011
|
0
|
3
| ||
|
|
Downloaded and installed the Solaris 8 packagewith:
% pkgadd -d splunkforwarder-4.2.3-105575-solaris-8-sparc.pkg
...
by
benloyall
Engager
in
Getting Data In
10-14-2011
|
1
|
1
| ||
|
|
I have just installed a Universal forwarder on a windows server and during the installation I selected the option to ...
by
itsomana
Path Finder
in
Getting Data In
10-20-2011
|
0
|
1
| ||
|
|
Hi !
I have a lot's of errors like that, when I try to log an Exchange server :
10-19-2011 20:37:04.309 +0200 E...
by
tdesaules
New Member
in
Getting Data In
10-19-2011
|
0
|
5
| ||
|
|
I have an event that contains the following date format/range text within it:
2011-10-07T00:00:00.000Z-2011-10-07T...
by
drewbfl
Path Finder
in
Getting Data In
10-19-2011
|
1
|
2
| ||
|
For my input [monitor::///home/mataharry/invasionplans/] index=statesecret whitelist=*.secret recurse=true
In the ...
by
mataharry
Communicator
in
Getting Data In
10-19-2011
|
1
|
1
| ||
|
|
I'm very new to Splunk. I just installed it in my environment and in the process of testing it. I'm wondering why a l...
by
eantonio
Path Finder
in
Getting Data In
10-19-2011
|
0
|
2
| ||
|
|
I struggling getting my props.conf to work now that i have moved to a universal forwarder.
On previous versions of...
by
jcbrendsel
Path Finder
in
Getting Data In
10-19-2011
|
0
|
2
| ||
|
|
I have a file that is being auto sourcetyped as syslog, and the file is read by a splunk agent. An example follows:
...
by
lisaac
Path Finder
in
Getting Data In
10-18-2011
|
0
|
3
| ||
|
|
Hi all, I need to append the domain to all hosts that send data to my splunk indexer, to avoid duplications (hostname...
by
bizza
Path Finder
in
Getting Data In
10-14-2011
|
0
|
3
| ||
|
|
Can I have a universal forwarder collect data from other universal forwarders and then send that off to the indexer?
by
matt
Splunk Employee
in
Getting Data In
05-06-2011
|
1
|
6
| ||
|
Hi,
i have setup before UDP as input for Splunk 4.1.7. But this time my configuration doesn´t work and i have no ...
by
tpaulsen
Contributor
in
Getting Data In
09-21-2011
|
0
|
7
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
206 -
data
470 -
development
5 -
encryption
1 -
eval
2 -
field extraction
549 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
930 -
host
154 -
HTTP Event Collector
432 -
index
538 -
indexer
702 -
indexing performance
1 -
inputs.conf
826 -
installation
5 -
intermediate forwarder
140 -
introduction
3 -
JSON
388 -
kvstore
1 -
Linux
450 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
47 -
proactive Splunk component monitoring
2 -
props.conf
967 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
489 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
312 -
time
204 -
transforms.conf
572 -
troubleshooting
15 -
universal forwarder
1,539 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
582 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Index This | When is October more than just the tenth month?
October 2025 Edition
Hayyy Splunk Education Enthusiasts and the Eternally Curious!
We’re back with this ...
Observe and Secure All Apps with Splunk
Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...
What’s New & Next in Splunk SOAR
Security teams today are dealing with more alerts, more tools, and more pressure than ever. Join us for an ...
Unanswered Topics
