Getting Data In

Community Activity

output queues to get filled Hi folks,What are reasons for my output queues to get filled???? I have my HF on azure cloud.It was working properly ... by vinoth_raj Path Finder in Getting Data In 07-06-2023 0 1	0	1
How to Trigger Time is different than Notable time? I have Splunk on v9.0.1 and ES on v7.0.1, the issue am facing for the notable alerts is that some of the alerts have ... by sarwshai Communicator in Getting Data In 07-06-2023 0 0	0	0
Properly index json files with events as elements of an array (at the example of Cloudtrail) I would like to manually import AWS Cloudtrail logs which were stored as GZipped JSON Files on S3. Those files reside... by daubsi_2 Explorer in Getting Data In 07-06-2023 0 2	0	2
Sample log formats for standard log4j sourcetype? Hello, could you provide sample log formats for log4j sourcetype? Is it covered by Splunk addon for Tomcat? Thanks. by splunkreal Influencer in Getting Data In 07-06-2023 0 1	0	1
How to get list of buckets which are having issues in replicating, from API and CLI? When my splunk multi-site indexer cluster comes up, I have some buckets belonging to _audit and _internal which are h... by shivanshsingh Explorer in Getting Data In 07-06-2023 1 5	1	5
Why are events using the wrong 'host' value? I have configured a Splunk HF with the following inputs.conf stanzas (details changed) for two new device logs. Note ... by rjk123 Explorer in Getting Data In 07-06-2023 0 4	0	4
How to use Splunk to monitor print jobs? Right now, we have Splunk setup to monitor Print Jobs. However, the print title in Event Viewer simply shows up as "D... by cooldude1812 Engager in Getting Data In 07-05-2023 0 3	0	3
How can I calculate session duration? I wanted to know how I can calculate the average daily duration of the sessions by lorscardala985 Explorer in Getting Data In 07-05-2023 0 10	0	10
How to parse json related log file during index time? Hi, I need help with parsing below data that is pulled from a python script. The data is pushed to system output and ... by divya_gn1 Loves-to-Learn in Getting Data In 07-05-2023 0 6	0	6
Time zone config not working as expected Hello,I'm trying to configure an ingestion of logs that are in UTC time.We are in Geneva and timezone is Europe/Zuric... by DavidCaputo Path Finder in Getting Data In 07-05-2023 0 0	0	0
Why am I receiving unwanted HB (Heartbeat ?) logs from my Heavy Forwarder? Hello Splunkers, Here is my use-case : I am cloning some events that arrive to my Heavy Forwarder and then forward th... by GaetanVP Contributor in Getting Data In 07-05-2023 0 12	0	12
What app do we use for Linux servers monitoring? We are looking for way to monitor commands/scripts executed from Linux specific server Is there any available app ... by rayar Contributor in Getting Data In 07-05-2023 0 1	0	1
Wha is the scripted input duplicate value? all fields duplicated which are coming in scripted input output. like below category message priority timestamp scrip... by anilkapoor123 Explorer in Getting Data In 07-05-2023 0 5	0	5
Can we have Splunk UF on Splunk Indexer to forward Audit logs? We have a requirement to send audit logs from Splunk to Another tool for security purpose. asked to install the UF on... by chimata1218 New Member in Getting Data In 07-04-2023 0 5	0	5
How to selectively monitor paths for hosts that contain same type of paths Hello Experts,I need help in resolving one of the issue that I am facing while trying to discard events that below to... by s_absinthe Explorer in Getting Data In 07-04-2023 0 1	0	1
Windows logs collection with WMI arrive with delay? Hi Splunkers, for our customer we collect log from Windows systems. The main configuration details are: Logs go from ... by SplunkExplorer Contributor in Getting Data In 07-04-2023 0 3	0	3
Is it possible to dump / drop data that is currently in queue? Production had a bug. One of the results of that bug was massive "over logging" of production nodes and those logs w... by onlineops Explorer in Getting Data In 07-04-2023 0 1	0	1
Log duplicates single event in log file hundreds of times Hi Folks,We have a complaint from stakeholders that they are seeing duplicate events in Splunk. they shared few examp... by koyachi Explorer in Getting Data In 07-04-2023 0 5	0	5
Indexers outage - What can I do to troubleshoot? Hello Splunkers, I am facing a problem with my indexers that are not able to index anymore. Neither the data forwarde... by GaetanVP Contributor in Getting Data In 07-04-2023 0 2	0	2
Splunk TA Cloud Services authentication error Cisco Umbrella user? Hello,does anyone here have an idea why cisco cloud security umbrella addon is interfering the authentication within ... by dkeck Influencer in Getting Data In 07-04-2023 1 1	1	1
Heavy forwarder logs - Splunk Cloud & Test Indexers Hi Team,I wanted to forward my logs from heavy forwarder to Splunk Cloud and the same logs should forward to my test ... by umesh Path Finder in Getting Data In 07-04-2023 0 1	0	1
Deployment server connection to License Master Hi team,I have a question related to Deployment server Connection to License master.My deployment server is connected... by umesh Path Finder in Getting Data In 07-04-2023 0 4	0	4
Date Format is not recognized The Logs I am tring to onboard in Splunk have the following time format, "YY.MM.DD HH:MM:SS" so I made a props.conf ... by agilhomar Explorer in Getting Data In 07-04-2023 0 8	0	8
How do I use authorise.conf centrally to manage user role access to indexes? we have a 6 node SHCWant to use the deployer to push out authorise.conf so that we can manage the user/role/index acc... by pbrinkman Path Finder in Getting Data In 07-03-2023 0 2	0	2
[WinEventLog://Security] logs to Splunk Hello guys, I have [WinEventLog://Security] inputs.conf setup.However , I would like to see the machine/server type ... by Murali Explorer in Getting Data In 07-03-2023 0 3	0	3