About mazurmateusz

mazurmateusz · ‎06-08-2015

follow up. How you solve your problem?

mazurmateusz · ‎06-08-2015

Hello, I made something like that: Add to props.conf: [Test_json] INDEXED_EXTRACTIONS = json KV_MODE = none NO_BINARY_CHECK = 1 pulldown_type = 1 and restart SPLUNK After restart try to upload file *.log 1. go to settings upload 2. pickup file 3. upload 4. choose Test_json as a source type And then i got preview error which information 'change source type'. Do you have any suggestion what i made wrong? Regards, M.

mazurmateusz · ‎06-03-2015

Hello, Sysadmins set nxlog syslog to put event logs from windows to external directory. The log format is 'json' with extension *.log My question is how to properly import those data to splunk and index it. Right now SPLUNK don't recognize all fields (like a EventType, EventID, Hostname etc.) thanks in advance Mateusz

mazurmateusz · ‎06-01-2015

Thanks for answer - I'm going to check this and give back information.

mazurmateusz · ‎06-01-2015

Hello All, After uploading Windows Active Directory data from file '.log' to SPLUNK, i recognized that all data is not parsed. To be honest- data looks like trash 😕 (imported as a one big row_event) Any advice how to parse data from log file to let's say format readable from SPLUNK? Maybe you know some scripts or any other way to parse file with extension '.log' to SPLUNK. thanks in advance, Mateusz

Posts	5
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎06-01-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

nxlog output (json in *.log) and Splunk

How to import data from file *.log from Active Dir...

Re: Windows Event Logs and Non Standard Importing

Re: nxlog output (json in *.log) and Splunk

nxlog output (json in *.log) and Splunk

Re: How to import data from file *.log from Active...

How to import data from file *.log from Active Dir...