Thread Info | |||||
---|---|---|---|---|---|
Hello
I have a number of devices logging to an index feeding Splunk via Syslog on 514/UDP. Now, I want to route lo...
by
j666gak
Communicator
in
Getting Data In
03-25-2015
|
2
|
5
| |||
I have following logs from a customer device:
0080101c40ba,10.10.1.2,1481421584,host1.labtest.com,error-message1,s...
by
jgcsco
Path Finder
in
Getting Data In
12-14-2016
|
1
|
8
| |||
-health_checkin_date: 2016-10-30T09:45:28.824Z
That is the line from a JSON event being sent into my Splunk insta...
by
joshualarkins
Explorer
in
Getting Data In
12-14-2016
|
1
|
3
| |||
We are facing a few issues whereour endpoints (clients) may have the Splunk service stopped. Can we force a restart o...
by
koshyk
Super Champion
in
Getting Data In
12-14-2016
|
0
|
3
| |||
This works in the search bar |makemv delim="|", but not when I put that in the props.conf file.
by
Yepeza
Path Finder
in
Getting Data In
12-09-2016
|
1
|
13
| |||
Hi,
we just set up our first Universal Forwarder which now works as expected. But it didn't do so initially, befor...
by
dwoehr
Explorer
in
Getting Data In
12-14-2016
|
0
|
1
| |||
Hello, I'm trying to figure out the following setup:
At the moment we have one rotating log file that should be fo...
by
dwoehr
Explorer
in
Getting Data In
12-13-2016
|
0
|
4
| |||
Hi.
We have recently been inadvertently sending some events to the null queue, due to a new data source that matc...
by
jhigginsmq
Path Finder
in
Getting Data In
12-13-2016
|
0
|
5
| |||
Hello guys,
I got Cisco firewalls and switches. Now we enabled syslog but I want to see when a port status goes fr...
by
nickbijmoer
Path Finder
in
Getting Data In
12-13-2016
|
0
|
4
| |||
I have one forwarder that is showing duplicate on my Splunk server. I updated 3 forwarders to test them. It was from ...
by
TeganDeloitte
New Member
in
Getting Data In
12-13-2016
|
0
|
1
| |||
I learned that Splunk compresses the incoming data and creates some index files to point towards compressed raw data....
by
ankithreddy777
Contributor
in
Getting Data In
12-12-2016
|
0
|
9
| |||
Hi forum,
I'm trying to monitor an xml structured logfile like this:
<Events>
<Event>line1</Events>
<Event>line...
by
schose
Builder
in
Getting Data In
12-13-2016
|
0
|
1
| |||
Hi users,
I recently installed universal forwarder on a Windows machine, aiming to forward logs from there to the ...
by
evang_26
Communicator
in
Getting Data In
01-30-2015
|
0
|
5
| |||
I have a requirement to route data that falls within two /24 CIDR ranges to a separate index, say 10.0.1.0/24 and 10....
by
IngloriousSplun
Communicator
in
Getting Data In
03-31-2015
|
0
|
3
| |||
Hi,
I have a bunch of different hosts going to a network port for syslog and need to route to different indexes/so...
by
a212830
Champion
in
Getting Data In
05-13-2016
|
0
|
2
| |||
i need help with adding this to my inputs.conf file on Splunk forwarder servers. i need Splunk to search this specifi...
by
rsingh
Explorer
in
Getting Data In
12-07-2016
|
0
|
5
| |||
I have a light forwarder listening on tcp:514. It forwards data to three indexers, all of whose clocks are set to UTC...
by
responsys_cm
Builder
in
Getting Data In
12-12-2016
|
0
|
1
| |||
Hi Folks;
Hopefully this isn't a strange question, but I had a question regarding the consolidation of configurati...
by
paimonsoror
Builder
in
Getting Data In
12-11-2016
|
0
|
4
| |||
Hi,
I'm trying to configure performance monitoring inputs on a Windows universal forwarder, to send to a Linux ind...
by
roychen
Path Finder
in
Getting Data In
02-03-2013
|
0
|
4
| |||
We have a case in which the client has directories, each containing a couple of thousands of log files, like -
201...
by
ddrillic
Ultra Champion
in
Getting Data In
12-12-2016
|
0
|
5
| |||
Hi,
We have a number of forwarders in our Splunk Enterprise. And I've been asked to chart the "uptime" of the forw...
by
allen_edmondso1
New Member
in
Getting Data In
12-07-2016
|
0
|
6
| |||
I am monitoring the directory where IIS logs are stored. The universal forwarder is sending the information on a dedi...
by
arkonner
Path Finder
in
Getting Data In
12-09-2016
|
0
|
4
| |||
Assuming I have a forwarder with inputs.conf:
[monitor:///var/log/notcritical]
index=datacritical
[monitor:///var...
by
mzorzi
Splunk Employee
in
Getting Data In
12-12-2016
|
0
|
1
| |||
Hi,
Splunk 6.5.0
I have the scenario that I have to import every hour a csv (File A) file from a system which h...
by
bosch_softtec
Path Finder
in
Getting Data In
12-09-2016
|
0
|
2
| |||
Uploaded File size: 717MB Current Index size: 811MB ( settings -> Data -> Indexes ) Index Size: 0.79 GB ( Monitoring...
by
Deepali529
Explorer
in
Getting Data In
12-09-2016
|
0
|
8
|