Getting Data In

Community Activity

ftp to non-windows platform Hello i have been struggling to get some logs from a machine on a non-windows platform. Would like to know if it is ... by rashidmirza New Member in Getting Data In 08-22-2011 0 5	0	5
inputs.conf not picking up monitored file I have what appears to be a simple monitor to watch for a specific file name with a regex to define the date stamped ... by MasterOogway Communicator in Getting Data In 08-22-2011 0 4	0	4
REST and javascript not working Greetings, I am working with the REST API, and have had some success from the command line. For instance: curl -u u... by jgauthier Contributor in Getting Data In 08-22-2011 2 12	2	12
Issue with csv timestamp extraction Hey everyone. All of my input data comes into splunk in .csv format. Each line is a record, and it has numerous times... by msarro Builder in Getting Data In 08-22-2011 0 1	0	1
Sizing my Splunk for MSExchange App I would like to know what to expect with regard to Splunk's daily indexing volume for my Splunk for MSExchange App. ... by maverick Splunk Employee in Getting Data In 08-22-2011 1 2	1	2
Start Splunk & an unclean shutdown : How to answer "yes" automatically to the request for faster recovery? Hello all, sometimes when I start splunk I get following message: Splunk has detected an unclean shutdown. Reco... by kronos121 Explorer in Getting Data In 08-22-2011 3 4	3	4
Problems with File Import and props.conf Hello, we use Splunk 4.1.7 and we would like to import once every night a file with the following content: 19702800... by tpaulsen Contributor in Getting Data In 08-22-2011 0 2	0	2
existing central sysloghost data to new splunk server I have: two existing OpenBSD Centralized Syslog loghosts (one is syslog-ng, one is syslogd)a new dedicated server fo... by tnorth Engager in Getting Data In 08-21-2011 1 3	1	3
How do you parse a log with one JSON object per line which is being sent by a forwarder? this solution worked for me for log files that are on the same machine as the splunk server. But when I started forw... by wtanaka Explorer in Getting Data In 08-19-2011 0 1	0	1
Automatically remove events older than one year I have a requirement to have data older than one year removed from Splunk. By "older than year", I mean the event has... by Branden Builder in Getting Data In 08-19-2011 1 5	1	5
Can a sourcetype be applied on the server, or does it need to be applied in the forwarder? I am trying to set up a universal forwarder with an inputs.conf which only contains something like this: [monitor://... by wtanaka Explorer in Getting Data In 08-19-2011 1 1	1	1
TCP connection flowchart Is there a TCP connection flowchart showing how the TCP connections are being established, controlled and closed betw... by MuS SplunkTrust in Getting Data In 08-19-2011 4 2	4	2
Can't index data on network drives in (VirtualBox WinXP SP3) Hello all, I got the problem, that Splunk is not able to index any data which is on the host system. Splunk itself i... by Katsche Path Finder in Getting Data In 08-18-2011 0 26	0	26
Using a CSV to search I am pretty sure this involves lookups but here is what I am attempting. I have a list of users in a CSV (users.csv)... by ryangibson99 Explorer in Getting Data In 08-18-2011 3 2	3	2
How to ask splunk to extract time_stamp only if time string is at the start of a line? I tried to put the "TIME_PREFIX = ^" at props.conf at system/default, system/local, myapp/default, myapp/local but no... by houxiaoxiao Engager in Getting Data In 08-17-2011 2 1	2	1
How to get the number of "unique" request with splunk We are currently looking for a way to find the number of "unique" request for a given event type with splunk. Like th... by ChrisJack New Member in Getting Data In 08-17-2011 0 3	0	3
The system cannot find the path specified. Hello all, I am running Splunk 4.2.3 on WinXP 32Bit in VirtualBox. Everytime I try to add some files to my database ... by Katsche Path Finder in Getting Data In 08-17-2011 0 14	0	14
Forwarder / Indexer Transforms. Hi guys, I have some universal-forwarders forwarding to an indexer (4.2.2) and all works great, i set the sourcetype... by Splunker Communicator in Getting Data In 08-16-2011 1 2	1	2
Unable to pull Perfmon Counter for %Processor Time Windows 2003 32-bit Has anyone seen the errors below and know how to correct? This same perfmon.conf is applied to both Windows 2008 64-b... by larry_lind New Member in Getting Data In 08-16-2011 0 3	0	3
Splunk for Exchange App (i.e. activity monitoring app) Is Splunk planning to create and/or provide a Splunk for Exchange App soon, to monitor emailing and other user activi... by maverick Splunk Employee in Getting Data In 08-15-2011 3 7	3	7
Configure Splunk to use Exchange? I'm in the process of evaluating Splunk within my company as a means to monitor certain server activity. I have a si... by AStaley Engager in Getting Data In 08-15-2011 1 1	1	1
Multi line Events parsing not working Hi I have multilines events , splunk indexes the same event as multiple events. I want Splunk to consider the new e... by testinggggg New Member in Getting Data In 08-15-2011 0 2	0	2
How to recognize event time that is embedded in json string in epoch seconds? I'm using "From files and directories" --> "Upload and index a file" to feed the data file. The file has data in foll... by skericsson New Member in Getting Data In 08-13-2011 0 2	0	2
OPSEC LEA for Solaris x86 intel based Hi, is there any way to grab checkpoint log using Solaris x86 based? I see at splunkbase, the app only for SPARC. h... by susanto_andi81 New Member in Getting Data In 08-11-2011 0 1	0	1
Data flood protection on forwarder or indexers Our splunk universal forwarders may be configured by our customers in terms of logs they want to collect and transfer... by cwacha Path Finder in Getting Data In 08-11-2011 2 1	2	1