Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 6,726 Online 158K Posts

Join Splunk and IDC to map the data architecture for trusted agentic operations around the latest announcements from .conf26. Register today to save your spot. Thursday, November 5 at 9am PT

Join us for a 4-part series on Full-Stack Observability: For the AI Era consisting of a Webinar, Tech Talk, interactive Lab, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas

Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas We’ve all been there. You’re in the middle of a high-stakes investigation, but your data is scattered across networking, ...

Splunk Employee

on Splunk Tech Talks Monday

Hello POJO, meet nocode

What's the Challenge? Instrumentation agents are highly advanced bits of software that manipulate bytecode, intercept library calls, and wrap and observe other software in order to create telemetry. ...

Splunk Employee

on Community Blog Monday

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and on-premises customers who have upgraded to version 10.4. This transformative update shifts ...

Splunk Employee

on Product News & Announcements Monday

5845

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data sources evolve, formats change, and field mappings drift over time. These changes can cause dashboards ...

Splunk Employee

on Product News & Announcements Saturday

768

Opentelemetry BT data and Traces not updating Hi All,I have created the opentelemetry demo application via Docker Desktop. Updated the Otel config file with Export... by Arun2 Observer in Splunk AppDynamics an hour ago 0 0	0	0
SplunkSOAR License - Enterprise Security Premier Edition Dears,As per the below:https://help.splunk.com/en/splunk-enterprise-security-8/administer/8.7/configuration-and-setti... by 0xAli Path Finder in Splunk SOAR yesterday 0 1	0	1
AppDynamics Event Service traditional on-prem; certificate renewal process PrerequisitesStep 0 — Identify the node and current certStep 1: Verify the keystore path for this nodeStep 2: Backup ... by Maciej_Popek Engager in AppDynamics Knowledge Base yesterday 0 0	0	0
ES 8: “Move to new queue” not available on custom team-based queues (works from the default analyst queue) Hi all,I’m running Splunk Enterprise Security 8.7.0 on Splunk Enterprise 10.2.3 . I can’t move findings out of team-b... by torgynnurlankul New Member in Splunk Enterprise Security yesterday 0 0	0	0
V10 compatibility of Wallix Bastion TA Hello, anyone tested on v10.2?Thanks. by splunkreal Influencer in All Apps and Add-ons yesterday 0 0	0	0
spl file couldnt upload hi there i already created spl file form splunk_cli and now should i upload it easy to the splunk but i cant , the an... by tarek_88 New Member in Splunk Enterprise yesterday 0 1	0	1
Multi-Layer Deployment Server: Backend Functional, GUI Error on Main DS I configured a multi-layer Deployment Server (DS) setup with the following architecture:Main DS Management: The main ... by Wohamed_wakkad Path Finder in Deployment Architecture yesterday 0 3	0	3
AI Toolkit without internet - how to stop it trying to fetch remote model cost map from online? Hello,I am setting up the AI Toolkit in an air gapped environment with local LLM.The issue I am running in to is that... by Andre_ Communicator in Splunk Enterprise Monday 0 0	0	0
Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas We’ve all been there. You’re in the m... by LesediK Splunk Employee in Splunk Tech Talks Monday 0 0	0	0
Hello POJO, meet nocode What's the Challenge? Instrumentation agents are highly advanced bits of software that manipulate bytecode, intercep... by jplumb Splunk Employee in Community Blog Monday 1 0	1	0
Announcing Modern Navigation: A New Era of Splunk User Experience We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and on-prem... by PreranaD Splunk Employee in Product News & Announcements Monday 0 17	0	17
SPL map command Good morning all,I run this search\| makeresults count=4 \| eval a="splunk_server" \| map search="search index=esak-qa s... by torustad Path Finder in Splunk Search Monday 0 21	0	21
Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data sources evolve, form... by varungupta Splunk Employee in Product News & Announcements Saturday 0 1	0	1
Splunk o11y Free Edition - AI Can i get guidance on how to get the AI copilot working on my splunk free edition platform please. Is my understandin... by amaljjohn New Member in Splunk Observability Cloud Saturday 0 0	0	0
Why can't I always see my alert's search results? Same alert, sometimes gone in minutes, sometimes fine for 30+ min I have an alert (something_failure) that checks every 5 minutes, and when it finds a problem, it posts a message to S... by yashmahajan New Member in Splunk Enterprise Saturday 0 1	0	1
Want a replacement for TA Zeek JSON Parsing. The latest Splunk Enterprise version that is Splunk 10.6.0.5 do not have the App "TA Zeek JSON Parsing". How can we r... by saised New Member in Splunk Enterprise Saturday 0 3	0	3
Office Hours \| Ask the Experts: AI Powered Observability “AI + Observability Office Hours: Ask the Experts”October 6, 2026 \| 11:00am – 12:00pm PT AI is transforming the appli... by Anam Community Manager in Community Office Hours Friday 0 1	0	1
ps_metrics.sh from the Splunk_TA_nix add-on Hi,I'm not getting results returned from the ps_metrics.sh script inside the Splunk_TA_nix add-on package.Here is the... by hotrodbass Explorer in All Apps and Add-ons Friday 0 1	0	1
ORA-17002: I/O error: IO Error (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPa Hi Everyone, we are using Splunk DB Connect 4.3.0 along with splunk 10.4.1 version, we had existing connections using... by maheshnc Path Finder in Getting Data In Friday 0 3	0	3
Federation 2.0: Explore the Latest Capabilities and Offerings [Register HERE]. This thread is for the Community Office Hours session on Federation 2.0: Explore the Latest Capabili... by rederada Splunk Employee in Community Office Hours Friday 0 0	0	0
splunk/create React App, make view globally available Hi fellow splunkers,i developed a monorepo app with a basic page as view and want to make the view globally available... by TheEggi98 Communicator in Splunk Enterprise Friday 0 2	0	2
Dashboard Studio table filter only works for values visible on page 1, fails for values from later pages until dashboard Splunk version 10.4 Victoria:I'm experiencing inconsistent filtering behavior in a Dashboard Studio table that uses a... by iamvikasjha New Member in Splunk Cloud Platform Friday 0 1	0	1
Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without Leaving Your IDE Instrumentation is usually the last step or even an afterthought when building out a project. The feature ships, the ... by CaitlinHalla Splunk Employee in Community Blog Thursday 1 0	1	0
Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk Cloud Platform Federated Search for Cisco Security Analytics and Logging (SAL) is now generally available as part of the Splunk Clo... by NithinKR Splunk Employee in Product News & Announcements Thursday 0 0	0	0
Index time field extraction for XML data? We have a use case where index time extractions for XML data makes a lot of sense yet I do not see an easy way go mak... by ebaileytu Communicator in Splunk Search Thursday 0 6	0	6

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Opentelemetry BT data and Traces not updating

SplunkSOAR License - Enterprise Security Premier Edition

AppDynamics Event Service traditional on-prem; certificate renewal process

ES 8: “Move to new queue” not available on custom team-based queues (works from the default analyst queue)

V10 compatibility of Wallix Bastion TA

spl file couldnt upload

Multi-Layer Deployment Server: Backend Functional, GUI Error on Main DS

AI Toolkit without internet - how to stop it trying to fetch remote model cost map from online?

Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas

Hello POJO, meet nocode

Announcing Modern Navigation: A New Era of Splunk User Experience

SPL map command

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Splunk o11y Free Edition - AI

Why can't I always see my alert's search results? Same alert, sometimes gone in minutes, sometimes fine for 30+ min

Want a replacement for TA Zeek JSON Parsing.

Office Hours | Ask the Experts: AI Powered Observability

ps_metrics.sh from the Splunk_TA_nix add-on

ORA-17002: I/O error: IO Error (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPa

Federation 2.0: Explore the Latest Capabilities and Offerings

splunk/create React App, make view globally available

Dashboard Studio table filter only works for values visible on page 1, fails for values from later pages until dashboard

Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without Leaving Your IDE

Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk Cloud Platform

Index time field extraction for XML data?

Meet the SplunkTrust

Painting a Clearer Picture: Unifying Your Investigations with Cisco AI Canvas

Hello POJO, meet nocode

Announcing Modern Navigation: A New Era of Splunk User Experience

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources