Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About winter4
winter4
Loves-to-Learn
Member since:
11-21-2024
12-06-2024
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 11-21-2024 |
Activity Feed
- Posted Re: Transforms.conf adding host to log message on Splunk Enterprise. 12-06-2024 12:02 AM
- Posted Re: Transforms.conf adding host to log message on Splunk Enterprise. 12-05-2024 10:42 PM
- Posted Transforms.conf adding host to log message on Splunk Enterprise. 12-05-2024 04:15 PM
- Tagged Transforms.conf adding host to log message on Splunk Enterprise. 12-05-2024 04:15 PM
- Posted Re: Sending data out and keeping metadata on Splunk Enterprise. 11-25-2024 10:03 PM
- Posted Re: Sending data out and keeping metadata on Splunk Enterprise. 11-21-2024 03:40 PM
- Posted Re: Sending data out and keeping metadata on Splunk Enterprise. 11-21-2024 01:49 PM
- Posted Re: Sending data out and keeping metadata on Splunk Enterprise. 11-21-2024 09:03 AM
- Posted Sending data out and keeping metadata on Splunk Enterprise. 11-21-2024 07:30 AM
- Tagged Sending data out and keeping metadata on Splunk Enterprise. 11-21-2024 07:30 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
12-05-2024
10:42 PM
thanks @PaulPanther I am trying to add the uf host name to the raw event so trying to manipulate the raw event to have something like “HOSTNAME — _raw_events” I am trying to configure this on the heavyforwarder and not trying to go into each uf to make configuration changes
... View more
12-05-2024
04:15 PM
Hi Splunk Community, Is there a way to capture the host of a UF as its passing through a HF to add the host right before the log messaging being processed. I have tried a few things with no luck but asking here while i dig through the documentations. Thanks!
... View more
- Tags:
- transform.conf
Labels
- Labels:
-
administration
-
configuration
11-25-2024
10:03 PM
Is there any other way outside of using syslog? either way thanks for all of the inputs @PickleRick @gcusello. Just an exercise on my part.
... View more
11-21-2024
03:40 PM
Hi @PickleRick Do you have any documentation detailing the hack that you are thinking of. Or do you have a sample of the configs I can input on the HF to get splunk to send that data. Any help will be greatly appreciated and serve as a good starting point. Thanks!
... View more
11-21-2024
01:49 PM
Hi @PickleRick , Do you know if there is any possible method of sending data from a splunk HF to a 3rd party endpoint that also maintains the metadata
... View more
11-21-2024
09:03 AM
Hi @gcusello, I am trying to forward the logs to both splunk and an external system via syslog. Correct, I want to forward the logs coming into my HF to the external 3rd party syslog and maintain the metadata associated with the logs.
... View more
11-21-2024
07:30 AM
Hi Team, I am looking for a way to forward data from my heavy forwarders to a different source while maintaining the metadata like (host, source, sourcetype) I have tried using the tcpout config in outputs.conf but I do not see the metadata being transferred. syslog config in outputs.conf does not work for me either.
... View more
- Tags:
- outputs.conf
Labels
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-06-2024
02:03 AM
|
