Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 3,936 Online 158K Posts

Join Splunk and IDC to map the data architecture for trusted agentic operations around the latest announcements from .conf26. Register today to save your spot. Thursday, November 5 at 9am PT

Join us for a 4-part series on Full-Stack Observability: For the AI Era consisting of a Webinar, Tech Talk, interactive Lab, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents with Agent Launchpad. Participants tackled familiar challenges across IT operations, Splunk ...

Splunk Employee

on Community Blog Thursday

167

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC transformation is not just about adding AI. It is about knowing where to apply autonomy, when ...

Splunk Employee

on Community Blog Thursday

Supercharging Windows Security Detection Performance: Introducing Hybrid Field Extractions

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone of modern Security Operations Centers (SOCs). However, in high-throughput environments, ...

Splunk Employee

on Community Blog Wednesday

11303

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really want in your observability platform is the owner, environment tag, or threat classification ...

Splunk Employee

on Community Blog Wednesday

109

Indexer Disk Tuning tips I wonder where to find performance test or best practices to configure splunk indexers. Like optimize Filesystem for ... by Jasem Engager in Deployment Architecture 6 hours ago 0 0	0	0
What sourcetypes or sources aren't being searched Is there a way to determine what sources and/or sourcetypes AREN'T being searched? If data is coming into Splunk and... by rmorlen Splunk Employee in Getting Data In yesterday 2 11	2	11
Splunk ID not received My Splunk ID was not sent so I can’t take my Splunk exam and support says 5–7 business days to respond. In 2026, shou... by ahmed1998 Observer in Training + Certification Discussions yesterday 0 0	0	0
Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps) Running Splunk Ent. on windows server-2019. Just upgraded to Splunk Ent. 10.6.1.1. Used a CLI cmd below for upgrading... by apietersen Contributor in Splunk Enterprise yesterday 0 0	0	0
Linux Universal Forwarders not showing latest installed version my Linux machines forwarders were updated from previous versions to 10.0.11 however the splunk agent manager is not s... by CharlySP New Member in Splunk Enterprise Friday 0 2	0	2
Microsoft Teams Add-on for Splunk - Some call records missing I have been using the addon for several months now and it works fine in general however I do find when getting into d... by AH123123 New Member in All Apps and Add-ons Friday 0 1	0	1
V10 compatibility of Wallix Bastion TA Hello, anyone tested on v10.2?Thanks. by splunkreal Influencer in All Apps and Add-ons Friday 0 2	0	2
Database not showing under Databse Monitoring Overview Hi team, I have configured Otel collector on MS SQL Server with host metrics and SQL Metrics. Host metrics started po... by Arun2 Observer in Splunk Observability Cloud Friday 0 1	0	1
Pairing Splunk SOAR with Enterprise Security fails: SOAR license (status: community) Hi everyone,I’m trying to pair Splunk SOAR (On-premises) with Splunk Enterprise Security through Configure → Pairing ... by 0xAli Path Finder in Splunk SOAR Friday 0 0	0	0
How do I install the Splunk Remote Upgrader for Linux Universal Forwarders if disabling sudoers Hello,I need to install the Splunk Remote Upgrader for Linux Universal Forwarders on a Linux system that has been har... by karn Path Finder in All Apps and Add-ons Friday 0 2	0	2
How to propagate a newly created index name to be listed on the HF apps? When we create a new index on the cloud, this index doesn't show up in the drop-downs on the various apps that are on... by ddrillic Ultra Champion in Getting Data In Friday 0 2	0	2
Meet the .conf26 AI Agent Buildathon Winners At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents with Agent... by adepp Splunk Employee in Community Blog Thursday 0 1	0	1
Trusted Autonomy in the SOC: A Maturity Journey AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC transformat... by mbonfiglio Splunk Employee in Community Blog Thursday 0 0	0	0
Looking for Advice on Learning Splunk for a SOC Analyst Career Hello Splunk Community! I'm a cybersecurity student from Egypt, currently learning Splunk Enterprise as part of my j... by ahmednasser New Member in Splunk Enterprise Thursday 0 1	0	1
SPL map command Good morning all,I run this search\| makeresults count=4 \| eval a="splunk_server" \| map search="search index=esak-qa s... by torustad Path Finder in Splunk Search Thursday 0 22	0	22
Any update on STIG guidance for current Splunk versions? Hello,I’m a Splunk admin supporting a government environment. We’ve historically used both the STIGs and the SRGs to ... by aoliver Engager in Security Thursday 2 2	2	2
Splunk o11y Free Edition - AI Can i get guidance on how to get the AI copilot working on my splunk free edition platform please. Is my understandin... by amaljjohn New Member in Splunk Observability Cloud Wednesday 0 1	0	1
Office Hours: Trusted Autonomy Readiness Reviews AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC transformat... by mbonfiglio Splunk Employee in Community Office Hours Wednesday 0 0	0	0
Supercharging Windows Security Detection Performance: Introducing Hybrid Field Extractions Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone of mod... by hrawat Splunk Employee in Community Blog Wednesday 0 1	0	1
Enriching Signals with the OTel Lookup Processor Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really want in y... by dhruvanshus Splunk Employee in Community Blog Wednesday 1 0	1	0
Opentelemetry BT data and Traces not updating Hi All,I have created the opentelemetry demo application via Docker Desktop. Updated the Otel config file with Export... by Arun2 Observer in Splunk AppDynamics Wednesday 0 0	0	0
SplunkSOAR License - Enterprise Security Premier Edition Dears,As per the below:https://help.splunk.com/en/splunk-enterprise-security-8/administer/8.7/configuration-and-setti... by 0xAli Path Finder in Splunk SOAR Tuesday 0 1	0	1
AppDynamics Event Service traditional on-prem; certificate renewal process PrerequisitesStep 0 — Identify the node and current certStep 1: Verify the keystore path for this nodeStep 2: Backup ... by Maciej_Popek Engager in AppDynamics Knowledge Base Tuesday 0 0	0	0
ES 8: “Move to new queue” not available on custom team-based queues (works from the default analyst queue) Hi all,I’m running Splunk Enterprise Security 8.7.0 on Splunk Enterprise 10.2.3 . I can’t move findings out of team-b... by torgynnurlankul New Member in Splunk Enterprise Security Tuesday 0 0	0	0
spl file couldnt upload hi there i already created spl file form splunk_cli and now should i upload it easy to the splunk but i cant , the an... by tarek_88 Engager in Splunk Enterprise Tuesday 0 1	0	1

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Indexer Disk Tuning tips

What sourcetypes or sources aren't being searched

Splunk ID not received

Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps)

Linux Universal Forwarders not showing latest installed version

Microsoft Teams Add-on for Splunk - Some call records missing

V10 compatibility of Wallix Bastion TA

Database not showing under Databse Monitoring Overview

Pairing Splunk SOAR with Enterprise Security fails: SOAR license (status: community)

How do I install the Splunk Remote Upgrader for Linux Universal Forwarders if disabling sudoers

How to propagate a newly created index name to be listed on the HF apps?

Meet the .conf26 AI Agent Buildathon Winners

Trusted Autonomy in the SOC: A Maturity Journey

Looking for Advice on Learning Splunk for a SOC Analyst Career

SPL map command

Any update on STIG guidance for current Splunk versions?

Splunk o11y Free Edition - AI

Office Hours: Trusted Autonomy Readiness Reviews

Supercharging Windows Security Detection Performance: Introducing Hybrid Field Extractions

Enriching Signals with the OTel Lookup Processor

Opentelemetry BT data and Traces not updating

SplunkSOAR License - Enterprise Security Premier Edition

AppDynamics Event Service traditional on-prem; certificate renewal process

ES 8: “Move to new queue” not available on custom team-based queues (works from the default analyst queue)

spl file couldnt upload

Meet the SplunkTrust

Meet the .conf26 AI Agent Buildathon Winners

Trusted Autonomy in the SOC: A Maturity Journey

Supercharging Windows Security Detection Performance: Introducing Hybrid Field Extractions

Enriching Signals with the OTel Lookup Processor

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources