About AbhinavRanjan

AbhinavRanjan · ‎09-18-2022

@gcusello query I am using |table _time,cluster_name,namespaceName,podName,policyName,message, severity,action,tags,resource,source,

AbhinavRanjan · ‎09-18-2022

@gcusello I have two source fields, One from the Splunk configuration(static throughout) and another from the logs which I am forwarding(dynamic data) , both are getting merged into a single field. I just want to hide the configuration data, i.e http:kafka here from the source

AbhinavRanjan · ‎09-18-2022

I have two source fields, One from the Splunk configuration(static throughout) and another from the logs which I am forwarding(dynamic data) , both are getting merged into a single field. I just want to hide the configuration data, i.e http:kafka here from the source

AbhinavRanjan · ‎09-18-2022

I have two values in a field source, I need to hide one i.e., http:kafka

AbhinavRanjan · ‎09-14-2022

I am using HEC to push the data to Splunk, and in the HEC we have a field Source, And the log which I am forwarding to Splunk too have a field name Source. The issue I am facing is, that both the source name gets merged and on each log, I can see the same, two values for the source. I don't want to change the field of my log, Is there a way I can change something on HEC?

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎09-14-2022

Online Status	Offline
Date Last Visited	‎09-23-2022 12:53 AM

How do I hide a value from field in Splunk from li...

Is there a way I can change source name on HEC?

Re: How do I hide a value from field in Splunk fro...

Re: How do I hide a value from field in Splunk fro...

Re: How do I hide a value from field in Splunk fro...

How do I hide a value from field in Splunk from li...

Is there a way I can change source name on HEC?