Getting Data In

Community Activity

Configure Splunk to use Exchange? I'm in the process of evaluating Splunk within my company as a means to monitor certain server activity. I have a si... by AStaley Engager in Getting Data In 08-15-2011 1 1	1	1
Multi line Events parsing not working Hi I have multilines events , splunk indexes the same event as multiple events. I want Splunk to consider the new e... by testinggggg New Member in Getting Data In 08-15-2011 0 2	0	2
How to recognize event time that is embedded in json string in epoch seconds? I'm using "From files and directories" --> "Upload and index a file" to feed the data file. The file has data in foll... by skericsson New Member in Getting Data In 08-13-2011 0 2	0	2
OPSEC LEA for Solaris x86 intel based Hi, is there any way to grab checkpoint log using Solaris x86 based? I see at splunkbase, the app only for SPARC. h... by susanto_andi81 New Member in Getting Data In 08-11-2011 0 1	0	1
Data flood protection on forwarder or indexers Our splunk universal forwarders may be configured by our customers in terms of logs they want to collect and transfer... by cwacha Path Finder in Getting Data In 08-11-2011 2 1	2	1
Garbled Events in new Splunk installation on Debian I recently installed Splunk on Debian 6. I created a TCP receiver on port 10000 and installed the Universal forwarde... by mpmackenna New Member in Getting Data In 08-10-2011 0 1	0	1
Forwarder stop accepting connections This morning I opened a dashboard and was greeted with "results not found." I thought this was peculiar, so I started... by jgauthier Contributor in Getting Data In 08-10-2011 1 2	1	2
Scripting to pull in logs from a URL I am trying to create a script that will index retrieve Apache server logs but have been unable to figure out how to ... by minton55 New Member in Getting Data In 08-09-2011 0 3	0	3
I see splunk has some ".path" files in windows app bin directory. What are these for? The windows app ships with some files that end in .path in the bin directory. How do these work? Is there any parti... by jrodman Splunk Employee in Getting Data In 08-09-2011 4 4	4	4
Problems with setting sourcetype through transformations.conf This is driving me mad - have gone through the documentation and responses to queries in here but still can't get sou... by quixand Path Finder in Getting Data In 08-09-2011 0 1	0	1
Labels not working on forms I am creating a criteria form for a report. When I use "text" fields, the labels work fine. But if I use radio or d... by timmy13 Communicator in Getting Data In 08-09-2011 0 1	0	1
enter arbitrary date on a form, convert to unix time, and search based on date range I'm probably making this too complicated, but I sense this should be easier than I'm making it out to be and I can't ... by jeff Contributor in Getting Data In 08-09-2011 0 2	0	2
Can I run the universal forwarder with a 4.1x indexer? Can I run a 4.2 universal forwarder with a 4.1x indexer, and a 4.1x deployment server? We are in the process of upgr... by sf_user_199 Path Finder in Getting Data In 08-09-2011 1 1	1	1
Universal forwarder windows to syslog doesn't work I am trying to get the Universal Forwarder to forward event logs (System and Security) from Windows to syslog on Linu... by mmather67 Path Finder in Getting Data In 08-08-2011 1 4	1	4
Log time differs from time on splunk host I'm running splunk in windows where the time is in PST. I read logs in GMT time, so when I search for most recent, i... by suhprano Path Finder in Getting Data In 08-08-2011 0 1	0	1
Indexing xml log file input I have a log file wherea typical line entry is as below ... I am trying to construct REGEX to be included in the "tra... by desi-indian Path Finder in Getting Data In 08-08-2011 1 4	1	4
Logs with no timestamp incorrectly getting date from file name I have a sourcetype where Splunk is correctly getting the time stamp from the events, but the events don't contain a ... by gpullis Communicator in Getting Data In 08-06-2011 1 4	1	4
Collect Windows Version Is there a recommended best-practice for collecting the version of windows that a certain Splunk-instance is running ... by sdwilkerson Contributor in Getting Data In 08-05-2011 1 1	1	1
How do I process rar files on a Windows Splunk install? I thought that Splunk would read compressed files and load them, however it is telling me the rar file is a binary. ... by approachct Path Finder in Getting Data In 08-05-2011 0 2	0	2
What's a best practice for ignoring Windows 2008 security events Like most of us with Windows servers, I'm fighting with keeping my license usage down in the face of Windows Server 2... by gpullis Communicator in Getting Data In 08-05-2011 0 1	0	1
Splunk, monitor file changes and MD5 checksum Hi all, I'm trying to index a log file which consists of some counters. This file doesn't change a lot as counters a... by cyrillefranchet Explorer in Getting Data In 08-05-2011 1 2	1	2
Distance between a Search Head and an Indexer We are looking at merging Splunk instances between different data centers and having a single Search head cluster. I ... by fk319 Builder in Getting Data In 08-05-2011 0 2	0	2
Index just filenames in a directory Is it possible to just index a directory of filenames? I have a directory containing gobs of logfiles. I really don't... by cejohnson Explorer in Getting Data In 08-04-2011 0 2	0	2
Search for failed inputs I indexed 365 files (a daily IIS log for a year) and according to the TailingProcessor:FileStatus there were some tha... by chca Path Finder in Getting Data In 08-03-2011 0 2	0	2
Problems with a dynamic input header in a scripted input I have a number of custom scripted inputs that use the dynamic input header (*SPLUNK* key=val) to establish vario... by Lowell Super Champion in Getting Data In 08-03-2011 0 1	0	1