Getting Data In

Community Activity

Overriding timezone in props.conf Hi, I'm trying to get Splunk to recognise my timezone based on a TZ and TIME_PREFIX setting in props.conf. However,... by howyagoin Contributor in Getting Data In 05-08-2011 0 2	0	2
should the data be indexed include timestamp e.g. if the data be indexed is an application log, all the messages logged in this log file should contain a timestam... by amywong New Member in Getting Data In 05-08-2011 0 2	0	2
is it possible to set up a scripted input that does its own sleeps and never exits? There's a scripted input that I wanted to create a while ago, but it had to do some 'setup' stuff at the beginning a... by sideview SplunkTrust in Getting Data In 05-07-2011 0 2	0	2
Splunking Postgres log events WITHOUT a timestamp Currently, my postgres log events do not contain a timestamp, which makes it difficult for splunking, especially hist... by maverick Splunk Employee in Getting Data In 05-06-2011 0 1	0	1
windows forwarder unable to add application,system and security event logs? Hi, I've a forwarder(v4.1.3) installed on a W2K DC and has been configured to forward Application,System and securit... by remy06 Contributor in Getting Data In 05-06-2011 1 7	1	7
Index a DB-log Hello all, Just wondering if some of you have already indexed some logs which are stored in a DB and if so, what wou... by OL Communicator in Getting Data In 05-06-2011 1 2	1	2
Splunk throws error message when data input tar.gz file contains Simplified Chinese characters(GB2312): Input is not proper UTF-8, indicate encoding! Splunk throws error message when data input tar.gz file contains Simplified Chinese characters(GB2312): Input is not ... by rsimmons Splunk Employee in Getting Data In 05-05-2011 1 1	1	1
Does batch input ignore files already read? I have a file in a folder that is being monitored by Splunk. Its contents have been indexed. If I move that file into... by Jason Motivator in Getting Data In 05-05-2011 5 2	5	2
unable to create centralized splunk server i am using fc9 webservers my server pool 192.168.0.0/24 i crated one splunk centralized server i integrated all clien... by digitmon New Member in Getting Data In 05-05-2011 0 3	0	3
universalforwarder 4.2.1 unable to connect to index server 4.2.1 with sslv3 have enabled SSLv3 on splunk 4.2.1 index server and universalforwarder 4.2.1, universalforwarder doesn't seem to be a... by deyeo Path Finder in Getting Data In 05-05-2011 0 3	0	3
How to monitor http web pages and splunk the results? Hello I'm looking to set something up that calls a bunch of http webpages that run on some of our boxes that need a ... by Hazel Communicator in Getting Data In 05-05-2011 1 1	1	1
Monitoring timestamp rotation log files Hi, I am not sure if out of box solution there for log rotation, when you are adding the file or directory. We are u... by sumitnagal Path Finder in Getting Data In 05-04-2011 0 5	0	5
Scheduling csv view/dashboard delivery Hello, i want to schedule email export csv for the view/dashboard like the pdf server : I know do it for search but... by willow75 Explorer in Getting Data In 05-04-2011 0 4	0	4
Re-index after changing props.conf? Yesterday afternoon I updated a number of files which had missing data in them in a directory which Splunk's tailing ... by howyagoin Contributor in Getting Data In 05-04-2011 0 3	0	3
snare Sourcetype Hi all, i'm running splunk 4.2.1 i need to take windows log by snare agent. When i create a data input and select so... by zagor New Member in Getting Data In 05-04-2011 0 2	0	2
Using cidrmatch with a CSV file throws error. I am trying to match a list of CIDR ranges in a csv file to hosts that are going outbound on our network...basically ... by ImanIself Explorer in Getting Data In 05-03-2011 1 4	1	4
source::.../ in props.conf sourcetype stanza appears to be causing high overhead I have a customer that set up the followin sourcetype spec in props.conf. on an AIX installation. /opt/usi is at the ... by Claw Splunk Employee in Getting Data In 05-03-2011 1 2	1	2
ERROR TailingProcessor - Ignoring path due to: This key could not be found : _MetaData:Index I checked out the new Universal Forwarder and ran into some problems that I dont understand. First I configured the ... by FRoth Contributor in Getting Data In 05-03-2011 0 1	0	1
How can I fix the timestamp parsing? I have a log file that has entries like: 2011 May 03 14:20:25:923 GMT +2 BW.AFSAdapter-AFSAdapter blablabla So my ... by rdeboo New Member in Getting Data In 05-03-2011 0 1	0	1
windows universal forwarder events not parsing on receiver Hello, Using Splunk 4.2 (96430) for both a Universal Forwarder and a regular/receiver installation, on Windows Server... by kerr63 New Member in Getting Data In 05-03-2011 0 3	0	3
How to split a file into events based on multiple criteria? Hello I have a log file that has two different types of events in it. Events that look like this <logtime="2011-04... by Hazel Communicator in Getting Data In 05-03-2011 0 4	0	4
UDP syslog seprate index for specific hosts Hey Guys, I have multiple host in my network using UDP:514 syslog to main index in splunk but now i want to create s... by satishp Explorer in Getting Data In 05-02-2011 1 1	1	1
TIME_FORMAT, it's May, not January Overnight I noticed that my Splunk was suspiciously empty for a specific CSV file which was read in daily. Upon furt... by howyagoin Contributor in Getting Data In 05-01-2011 1 3	1	3
After enabling Universal Forwarder in Splunk 4.2, and restarting, it crashed? When I enable Universal Forwarder in core Splunk 4.2, after restart, it crashed. by rsimmons Splunk Employee in Getting Data In 04-29-2011 1 1	1	1
Extracting fields from a simple KV input I'm a trying to index multi line key value (KV) data from a TCP input. I have full control of the input so I can modi... by magnuspenilsson Explorer in Getting Data In 04-29-2011 0 1	0	1