Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I am trying to get the Universal Forwarder to forward event logs (System and Security) from Windows to syslog on Linu...
by
mmather67
Path Finder
in
Getting Data In
08-07-2011
|
1
|
4
| ||
|
|
I'm running splunk in windows where the time is in PST.
I read logs in GMT time, so when I search for most recent,...
by
suhprano
Path Finder
in
Getting Data In
08-02-2011
|
0
|
1
| ||
|
|
I have a log file wherea typical line entry is as below ... I am trying to construct REGEX to be included in the "tra...
by
desi-indian
Path Finder
in
Getting Data In
08-05-2011
|
1
|
4
| ||
|
|
I have a sourcetype where Splunk is correctly getting the time stamp from the events, but the events don't contain a ...
by
gpullis
Communicator
in
Getting Data In
07-25-2011
|
1
|
4
| ||
|
|
Is there a recommended best-practice for collecting the version of windows that a certain Splunk-instance is running ...
by
sdwilkerson
Contributor
in
Getting Data In
08-05-2011
|
1
|
1
| ||
|
|
I thought that Splunk would read compressed files and load them, however it is telling me the rar file is a binary. I...
by
approachct
Path Finder
in
Getting Data In
07-19-2011
|
0
|
2
| ||
|
|
Like most of us with Windows servers, I'm fighting with keeping my license usage down in the face of Windows Server 2...
by
gpullis
Communicator
in
Getting Data In
08-05-2011
|
0
|
1
| ||
|
Hi all,
I'm trying to index a log file which consists of some counters. This file doesn't change a lot as counters...
by
cyrillefranchet
Explorer
in
Getting Data In
08-05-2011
|
1
|
2
| ||
|
We are looking at merging Splunk instances between different data centers and having a single Search head cluster.
...
by
fk319
Builder
in
Getting Data In
08-04-2011
|
0
|
2
| ||
|
|
Is it possible to just index a directory of filenames? I have a directory containing gobs of logfiles. I really don't...
by
cejohnson
Explorer
in
Getting Data In
08-03-2011
|
0
|
2
| ||
|
|
I indexed 365 files (a daily IIS log for a year) and according to the TailingProcessor:FileStatus there were some tha...
by
chca
Path Finder
in
Getting Data In
07-22-2011
|
0
|
2
| ||
|
|
I have a number of custom scripted inputs that use the dynamic input header (***SPLUNK*** key=val) to establish vario...
by
Lowell
Super Champion
in
Getting Data In
10-01-2010
|
0
|
1
| ||
|
|
I'm using oneshot to do a one-time import of data:
splunk add oneshot $(pwd)/mydata -sourcetype mytype -index main...
by
Ron_Naken
Splunk Employee
in
Getting Data In
08-10-2010
|
9
|
4
| ||
|
IGNORE this question/problem. Bad search skills led to bad conslusion.
About 30 Splunk Universal Forwarders se...
by
twinspop
Influencer
in
Getting Data In
08-03-2011
|
0
|
4
| ||
|
|
If I am reading http://splunk-base.splunk.com/answers/27373/universal-forwarder-and-propsconf-and-transformsconf corr...
by
nisse
Explorer
in
Getting Data In
08-01-2011
|
1
|
2
| ||
|
|
Something's up with the batch processor. I send the following file to a sink and it doesn't set any of the metadata f...
by
Marinus
Communicator
in
Getting Data In
07-22-2011
|
0
|
1
| ||
|
|
I am working on a custom module that extends the SingleValue module. I couldn't get the custom module to work correct...
by
hoffmandirt
Explorer
in
Getting Data In
09-13-2010
|
0
|
2
| ||
|
|
I'm using a forwarder (regular) to forward TCP input to indexer. The events are being forwarded correctly to the inde...
by
pmr
Explorer
in
Getting Data In
02-24-2011
|
0
|
3
| ||
|
|
My indexer is on Linux, but all the forwarders are on Windows. I've been putting the file names being monitored into ...
by
RVDowning
Contributor
in
Getting Data In
07-27-2011
|
1
|
1
| ||
|
|
Reading the questions that reference SSL certificates for splunk data I'm confused. If I simply use SSL to encrypt da...
by
byronschwab
Engager
in
Getting Data In
07-28-2011
|
1
|
1
| ||
|
|
Is there a way to make it so Splunk will discard a log entry that comes in with a certain substring in the message su...
by
jmorello
Engager
in
Getting Data In
07-28-2011
|
1
|
1
| ||
|
|
So i created an app folder... and indexes.conf .. and an inputs.conf to monitor a directory.
I then restarted splu...
by
hiddenkirby
Contributor
in
Getting Data In
08-18-2010
|
1
|
11
| ||
|
|
Hi
Is there a way to extract a part of log event before it being indexed to splunk server for example Below is th...
by
dhs_harry08
Path Finder
in
Getting Data In
07-27-2011
|
0
|
2
| ||
|
|
I need to watch log files for certain error strings only. Ideally this would be done on the machine that contains the...
by
sdickson
New Member
in
Getting Data In
07-26-2011
|
0
|
1
| ||
|
|
I have done 3-4 days of research and have been striking out. Here is the process that I follow. I install the univers...
by
chrisscott1
New Member
in
Getting Data In
06-28-2011
|
0
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
206 -
data
467 -
development
5 -
encryption
1 -
eval
2 -
field extraction
548 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
929 -
host
154 -
HTTP Event Collector
432 -
index
538 -
indexer
702 -
indexing performance
1 -
inputs.conf
826 -
installation
5 -
intermediate forwarder
140 -
introduction
3 -
JSON
387 -
kvstore
1 -
Linux
450 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
46 -
proactive Splunk component monitoring
2 -
props.conf
965 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
489 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
312 -
time
204 -
transforms.conf
571 -
troubleshooting
15 -
universal forwarder
1,539 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
582 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...
If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...
Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions
Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...
Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...
Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...
Unanswered Topics
