Getting Data In

Community Activity

TCP vs Splunk cmd Hi all! I'm a little bit upset with next problem... If I run some script within splunk (powershell, python, etc) an... by Vladimir Path Finder in Getting Data In 08-25-2011 0 3	0	3
inputs.conf not respecting wildcard So, this is my problem area of a inputs.conf file on a box with a 4.2.2 universal forwarder: Directory names made up... by rampsplunk New Member in Getting Data In 08-24-2011 0 2	0	2
How to best do deal with alerting and summary indexing on mobile laptops If I want to use Splunk to monitor event logs on laptops that will be on and offline with some frequency, how does Sp... by jambajuice Communicator in Getting Data In 08-24-2011 0 2	0	2
To use or not to use TCP as input method? Hi all, I have a few custom remote sensors that I would like Splunk to monitor. These sensors do not use files or TC... by samiomer Path Finder in Getting Data In 08-24-2011 0 1	0	1
Cisco IPS addon issues Good Day, I have installed the IPS addon to the Cisco Security, but am not generating any information. I tried execu... by stuckeysnewband New Member in Getting Data In 08-24-2011 0 3	0	3
Forwading and indexing with an attitude? I need to collect windows security event logs and do two things with them. First forward the data to another log coll... by PaulEscher Explorer in Getting Data In 08-23-2011 1 2	1	2
CEF log messages are not coming on one line. Messages are run together. I'm sending CEF messages to a Splunk forwarder listening on TCP:9999. The lines are not being individually being iden... by mlulmer Explorer in Getting Data In 08-23-2011 0 6	0	6
SplunkUniversalForwarder not forwarding input files We are using SplunkUniversalForwarder 4.2.3 x64 to forward some logs. inputs.conf has the following stanzas [monitor... by anantshah Path Finder in Getting Data In 08-23-2011 0 3	0	3
Remote windows event log to linux splunk server I require to monitor windows event logs on my linux splunk server. I realize that i will likely have to convert the w... by topscms Engager in Getting Data In 08-23-2011 2 2	2	2
Indexes Overloaded? Im currently indexing large amount of data and monitoring the process and usage from the Deployment Monitor. For som... by Dark_Ichigo Builder in Getting Data In 08-23-2011 2 2	2	2
ftp to non-windows platform Hello i have been struggling to get some logs from a machine on a non-windows platform. Would like to know if it is ... by rashidmirza New Member in Getting Data In 08-22-2011 0 5	0	5
inputs.conf not picking up monitored file I have what appears to be a simple monitor to watch for a specific file name with a regex to define the date stamped ... by MasterOogway Communicator in Getting Data In 08-22-2011 0 4	0	4
REST and javascript not working Greetings, I am working with the REST API, and have had some success from the command line. For instance: curl -u u... by jgauthier Contributor in Getting Data In 08-22-2011 2 12	2	12
Issue with csv timestamp extraction Hey everyone. All of my input data comes into splunk in .csv format. Each line is a record, and it has numerous times... by msarro Builder in Getting Data In 08-22-2011 0 1	0	1
Sizing my Splunk for MSExchange App I would like to know what to expect with regard to Splunk's daily indexing volume for my Splunk for MSExchange App. ... by maverick Splunk Employee in Getting Data In 08-22-2011 1 2	1	2
Start Splunk & an unclean shutdown : How to answer "yes" automatically to the request for faster recovery? Hello all, sometimes when I start splunk I get following message: Splunk has detected an unclean shutdown. Reco... by kronos121 Explorer in Getting Data In 08-22-2011 3 4	3	4
Problems with File Import and props.conf Hello, we use Splunk 4.1.7 and we would like to import once every night a file with the following content: 19702800... by tpaulsen Contributor in Getting Data In 08-22-2011 0 2	0	2
existing central sysloghost data to new splunk server I have: two existing OpenBSD Centralized Syslog loghosts (one is syslog-ng, one is syslogd)a new dedicated server fo... by tnorth Engager in Getting Data In 08-21-2011 1 3	1	3
How do you parse a log with one JSON object per line which is being sent by a forwarder? this solution worked for me for log files that are on the same machine as the splunk server. But when I started forw... by wtanaka Explorer in Getting Data In 08-19-2011 0 1	0	1
Automatically remove events older than one year I have a requirement to have data older than one year removed from Splunk. By "older than year", I mean the event has... by Branden Builder in Getting Data In 08-19-2011 1 5	1	5
Can a sourcetype be applied on the server, or does it need to be applied in the forwarder? I am trying to set up a universal forwarder with an inputs.conf which only contains something like this: [monitor://... by wtanaka Explorer in Getting Data In 08-19-2011 1 1	1	1
TCP connection flowchart Is there a TCP connection flowchart showing how the TCP connections are being established, controlled and closed betw... by MuS SplunkTrust in Getting Data In 08-19-2011 4 2	4	2
Can't index data on network drives in (VirtualBox WinXP SP3) Hello all, I got the problem, that Splunk is not able to index any data which is on the host system. Splunk itself i... by Katsche Path Finder in Getting Data In 08-18-2011 0 26	0	26
Using a CSV to search I am pretty sure this involves lookups but here is what I am attempting. I have a list of users in a CSV (users.csv)... by ryangibson99 Explorer in Getting Data In 08-18-2011 3 2	3	2
How to ask splunk to extract time_stamp only if time string is at the start of a line? I tried to put the "TIME_PREFIX = ^" at props.conf at system/default, system/local, myapp/default, myapp/local but no... by houxiaoxiao Engager in Getting Data In 08-17-2011 2 1	2	1