Hi,  I am dealing with an issue where I am ingesting some logs that contains a few regular line then followed by xml data, but I am only seeing 1 event show up properly with the regular lines and 2 other events get cut short after ingesting the first few lines (examples below).  So each event is meant to be structured like event1 however they are cut and when I check the actual log file everything is present.  I tried changing the limits.conf and including maxKBps to 0 but no luck. [thruput] maxKBps = 0 Any other ideas as to what could be causing the issue?  Event1: 2024-11-01 10:04:24,488 23 INFO Sample1 - Customer:11111 ApiKey:xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx DateTime:2024-11-01 10:04:24 RequestBody: <?xml version="1.0" encoding="utf-16"?>........<closing tag> Event2: 2024-11-01 10:04:26,488 23 INFO Sample1 - Customer:11111 ApiKey:xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Event3:  2024-11-01 10:04:28,488 23 INFO Sample1 - Customer:11111 ApiKey:xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx ... View more

Hi All,  I am having issues with DB connect version that I downloaded is having issues with sending data ... View more

Hi Splunk Community,  I am having issues with Splunk DB Connect 3.18.0 not sending data.  I was able to connect the db connect app to the database and query properly but no luck seeing the data from splunk cloud. I am able to send other logs and data to Splunk cloud with no issues.  Thanks! ... View more

  How do I change the directory path for the error below. the problem is with the /bin/bin in the path.  Any help is greatly appreciated! ... View more

Hi community,    I am trying to connect to the DB connect app and i am constantly redirected to http://$HOST/en-US/app/splunk_app_db_connect/ftr What is the FTR and how can I get rid of this error or force a redirection to a DB app that will work.  I tried deleting the app folder in the ($SPLUNK_HOME/etc/apps) directory and reinstalling but still getting the same error. Any assistance here will be greatly appreciated.      ... View more

Hi All,  What are some of the best ways to monitor the health status of KV store of the heavy forwarders in my environment. I am looking for a way to monitor it with a search from my search head.      Thanks in advance!  ... View more

Hi,  I created a column chart in Splunk that shows month but will like to also indicate the day of the week for each of those months Sample query ------------------- index=_internal | bucket _time span =1d |eval month=strftime(_time,"%b") | eval day=strftime(_time,"%a") | stats avg(count) as Count max(count) as maximum by month, day ... View more

Hi,  Is it possible to create a tab on a dashboard while also creating a redirection to a new dashboard when the tab is clicked without having to click the clone the dashboard. Thanks in advance!  ... View more

Hi,  Anyone know a summary index used by Splunk to retain the index sizes? I can calculate a index size by using internal index but I need to go back further than the last month.  Any other method is welcomed as well.  Thanks   ... View more