Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About minliang
minliang
Loves-to-Learn Lots
Member since:
05-25-2017
11-03-2021
Community Statistics
| Posts | 5 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 05-25-2017 |
Activity Feed
- Posted Re: Universal Forwarder sending two sets of Windows Security Logs to two different indexer on Getting Data In. 11-02-2021 08:44 AM
- Posted Universal Forwarder sending two sets of Windows Security Logs to two different indexer on Getting Data In. 11-01-2021 04:03 PM
- Posted How to modify sourcetype for forwarded windows event on Getting Data In. 04-19-2020 07:29 AM
- Tagged How to modify sourcetype for forwarded windows event on Getting Data In. 04-19-2020 07:29 AM
- Tagged How to modify sourcetype for forwarded windows event on Getting Data In. 04-19-2020 07:29 AM
- Tagged How to modify sourcetype for forwarded windows event on Getting Data In. 04-19-2020 07:29 AM
- Posted Re: Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 09:41 AM
- Posted Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 08:55 AM
- Tagged Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 08:55 AM
- Tagged Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 08:55 AM
- Tagged Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 08:55 AM
- Tagged Why am I getting this Python error in splunkd.log? on Splunk Dev. 02-14-2018 08:55 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
11-02-2021
08:44 AM
Okay, I took the suggestion and basically setup index and forwarding. I have this in my transforms.prof in indexer1 to forward logs to my second index using TCP_ROUTING. My new question is that how can I specify the index name to send the data to in Indexer2. [DataToForward] REGEX= XYZ DEST_KEY = _TCP_ROUTING FORMAT = INDEXER2
... View more
11-01-2021
04:03 PM
I need the Universal Forwarders to send Windows Security Logs to two different indexers but the data I want to send has different criteria. I need to send all win security events without a whitelist to Indexer1 and I need to send win security events with a whitelist to indexer2. Indexer2 is in another country which will provide 24/7 SOC support and there's a bandwidth limitation. Is this possible?
... View more
Labels
- Labels:
-
universal forwarder
04-19-2020
07:29 AM
For some reason, the sourcetype of my forwarded windows events are now set to WinEventType instead of the usual "Windows:xxx". Where do i change the setting for this?
... View more
02-14-2018
09:41 AM
My python version 2.7 and Splunk version 6.5.3
... View more
02-14-2018
08:55 AM
I am getting strange python error in splunkd log. not sure what to make of it.
02-14-2018 11:33:14.041 -0500 ERROR loader - File "E:\Splunk\Python-2.7\Lib\site-packages\splunk\clilib\cli.py", line 17, in
02-14-2018 11:33:14.041 -0500 ERROR loader - import splunk.clilib.cli_common as comm
02-14-2018 11:33:14.041 -0500 ERROR loader - File "E:\Splunk\Python-2.7\Lib\site-packages\splunk\clilib\cli_common.py", line 8, in
02-14-2018 11:33:14.041 -0500 ERROR loader - import httplib, shutil
02-14-2018 11:33:14.041 -0500 ERROR loader - File "E:\Splunk\Python-2.7\Lib\httplib.py", line 255, in
02-14-2018 11:33:14.041 -0500 ERROR loader - class HTTPMessage(mimetools.Message):
02-14-2018 11:33:14.041 -0500 ERROR loader - AttributeError: 'module' object has no attribute 'Message'
02-14-2018 11:33:14.041 -0500 ERROR loader - <<<<< EOF (pre-flight-checks)
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-03-2021
05:47 PM
|
