Getting Data In

Community Activity

Forwading and indexing with an attitude? I need to collect windows security event logs and do two things with them. First forward the data to another log coll... by PaulEscher Explorer in Getting Data In 08-23-2011 1 2	1	2
CEF log messages are not coming on one line. Messages are run together. I'm sending CEF messages to a Splunk forwarder listening on TCP:9999. The lines are not being individually being iden... by mlulmer Explorer in Getting Data In 08-23-2011 0 6	0	6
SplunkUniversalForwarder not forwarding input files We are using SplunkUniversalForwarder 4.2.3 x64 to forward some logs. inputs.conf has the following stanzas [monitor... by anantshah Path Finder in Getting Data In 08-23-2011 0 3	0	3
Remote windows event log to linux splunk server I require to monitor windows event logs on my linux splunk server. I realize that i will likely have to convert the w... by topscms Engager in Getting Data In 08-23-2011 2 2	2	2
Indexes Overloaded? Im currently indexing large amount of data and monitoring the process and usage from the Deployment Monitor. For som... by Dark_Ichigo Builder in Getting Data In 08-23-2011 2 2	2	2
ftp to non-windows platform Hello i have been struggling to get some logs from a machine on a non-windows platform. Would like to know if it is ... by rashidmirza New Member in Getting Data In 08-22-2011 0 5	0	5
inputs.conf not picking up monitored file I have what appears to be a simple monitor to watch for a specific file name with a regex to define the date stamped ... by MasterOogway Communicator in Getting Data In 08-22-2011 0 4	0	4
REST and javascript not working Greetings, I am working with the REST API, and have had some success from the command line. For instance: curl -u u... by jgauthier Contributor in Getting Data In 08-22-2011 2 12	2	12
Issue with csv timestamp extraction Hey everyone. All of my input data comes into splunk in .csv format. Each line is a record, and it has numerous times... by msarro Builder in Getting Data In 08-22-2011 0 1	0	1
Sizing my Splunk for MSExchange App I would like to know what to expect with regard to Splunk's daily indexing volume for my Splunk for MSExchange App. ... by maverick Splunk Employee in Getting Data In 08-22-2011 1 2	1	2
Start Splunk & an unclean shutdown : How to answer "yes" automatically to the request for faster recovery? Hello all, sometimes when I start splunk I get following message: Splunk has detected an unclean shutdown. Reco... by kronos121 Explorer in Getting Data In 08-22-2011 3 4	3	4
Problems with File Import and props.conf Hello, we use Splunk 4.1.7 and we would like to import once every night a file with the following content: 19702800... by tpaulsen Contributor in Getting Data In 08-22-2011 0 2	0	2
existing central sysloghost data to new splunk server I have: two existing OpenBSD Centralized Syslog loghosts (one is syslog-ng, one is syslogd)a new dedicated server fo... by tnorth Engager in Getting Data In 08-21-2011 1 3	1	3
How do you parse a log with one JSON object per line which is being sent by a forwarder? this solution worked for me for log files that are on the same machine as the splunk server. But when I started forw... by wtanaka Explorer in Getting Data In 08-19-2011 0 1	0	1
Automatically remove events older than one year I have a requirement to have data older than one year removed from Splunk. By "older than year", I mean the event has... by Branden Builder in Getting Data In 08-19-2011 1 5	1	5
Can a sourcetype be applied on the server, or does it need to be applied in the forwarder? I am trying to set up a universal forwarder with an inputs.conf which only contains something like this: [monitor://... by wtanaka Explorer in Getting Data In 08-19-2011 1 1	1	1
TCP connection flowchart Is there a TCP connection flowchart showing how the TCP connections are being established, controlled and closed betw... by MuS SplunkTrust in Getting Data In 08-19-2011 4 2	4	2
Can't index data on network drives in (VirtualBox WinXP SP3) Hello all, I got the problem, that Splunk is not able to index any data which is on the host system. Splunk itself i... by Katsche Path Finder in Getting Data In 08-18-2011 0 26	0	26
Using a CSV to search I am pretty sure this involves lookups but here is what I am attempting. I have a list of users in a CSV (users.csv)... by ryangibson99 Explorer in Getting Data In 08-18-2011 3 2	3	2
How to ask splunk to extract time_stamp only if time string is at the start of a line? I tried to put the "TIME_PREFIX = ^" at props.conf at system/default, system/local, myapp/default, myapp/local but no... by houxiaoxiao Engager in Getting Data In 08-17-2011 2 1	2	1
How to get the number of "unique" request with splunk We are currently looking for a way to find the number of "unique" request for a given event type with splunk. Like th... by ChrisJack New Member in Getting Data In 08-17-2011 0 3	0	3
The system cannot find the path specified. Hello all, I am running Splunk 4.2.3 on WinXP 32Bit in VirtualBox. Everytime I try to add some files to my database ... by Katsche Path Finder in Getting Data In 08-17-2011 0 14	0	14
Forwarder / Indexer Transforms. Hi guys, I have some universal-forwarders forwarding to an indexer (4.2.2) and all works great, i set the sourcetype... by Splunker Communicator in Getting Data In 08-16-2011 1 2	1	2
Unable to pull Perfmon Counter for %Processor Time Windows 2003 32-bit Has anyone seen the errors below and know how to correct? This same perfmon.conf is applied to both Windows 2008 64-b... by larry_lind New Member in Getting Data In 08-16-2011 0 3	0	3
Splunk for Exchange App (i.e. activity monitoring app) Is Splunk planning to create and/or provide a Splunk for Exchange App soon, to monitor emailing and other user activi... by maverick Splunk Employee in Getting Data In 08-15-2011 3 7	3	7