Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

122K Members 2,006 Online 157K Posts

Join us for a 4-part series on Splunk Agent Observability consisting of Webinar, Tech Talk, Workshop, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Long before a new capability reaches the keynote stage, it begins as an idea waiting to be tested. At Innovation Labs at .conf26, you get to join the conversation while those ideas are still taking ...

Splunk Employee

on Community Blog 14 hours ago

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology guide for avoiding event corruption, duplicate data, and blocked forwarding queues. If you ...

Splunk Employee

on Community Blog 15 hours ago

Data Management Digest – August 2026

Data Management Digest Welcome to the August 2026 edition of Data Management Digest! August was a big month for Splunk Data Management, and this edition is packed. We’re covering new Splunk Platform ...

Splunk Employee

on Product News & Announcements yesterday

114

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at .conf26 on Wednesday Looking to dive into Splunk? Join one of our Product Focus Sessions on ...

Splunk Employee

on Community Blog Thursday

117

SPL Find difference from previous day from a DB Source We currently have a DB Connection and a Query which brings in Project Details with the username Entitlements. The Que... by LizAndy123 Path Finder in Splunk Search an hour ago 0 4	0	4
Error while trying to configure app PureStorage Unified addon: Error: Request failed with status code 500 Hello,I'm trying to configure the PureStorage Unified addon, and keep getting the Something went wrong errorAddon:htt... by mcqueen9 Engager in Installation 3 hours ago 0 1	0	1
AI AGENT BUILDATHON - TERMS & CONDITIONS / OFFICIAL RULES NO PURCHASE OR PAYMENT OF ANY KIND IS NECESSARY TO ENTER OR WIN. A PURCHASE WILL NOT INCREASE YOUR CHANCES OF WINNING... by rederada Splunk Employee in Welcome Center 9 hours ago 0 0	0	0
At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs. Long before a new capability reaches the keynote stage, it begins as an idea waiting to be tested. At Innovation Labs... by shradha_narain Splunk Employee in Community Blog 14 hours ago 1 0	1	0
Forwarder Topology Guidance: Intermediate HF vs Intermediate UF Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology guide f... by hrawat Splunk Employee in Community Blog 15 hours ago 0 0	0	0
Entity Risk Reduction upon False Positive disposition Hi All,I am trying to build a playbook that reduces the risk of an entity in any of the splunk notable only when the ... by pruthviraj_k_m Explorer in Splunk SOAR 15 hours ago 0 1	0	1
App setup I have installed the app and would like to proceed with the app setup and data ingestion configuration. Could you ple... by poojas89 New Member in All Apps and Add-ons 17 hours ago 0 2	0	2
Zabbix Add-on For Splunk Dear Community:I am looking for information on ( Zabbix add-on for Splunk ) as to the compatibility with Splunk 10.2.... by bloodsd Engager in Splunk Enterprise 17 hours ago 0 2	0	2
Trying to use .* as input parameter of an action when there are multiple values in the list Successful when using finding:consolidated_findings.example.0 or finding:consolidated_findings.example.1 but not when... by jjkel Explorer in Splunk SOAR yesterday 1 4	1	4
Customer Portal Login Issue I am currently unable to log into the Splunk Support Portal. The system continuously attempts to redirect me to the P... by szutsmarcell New Member in Training + Certification Discussions yesterday 0 2	0	2
Data Management Digest – August 2026 Data Management Digest Welcome to the August 2026 edition of Data Management Digest! August was a big month for Spl... by MichelleCorpora Splunk Employee in Product News & Announcements yesterday 0 0	0	0
Newly verified Splunk account incorrectly says all Cloud trials have been used; existing-trials link returns 404. Hello Splunk Support,I have just created and activated my Splunk account and have not intentionally used three Splunk... by TamLe_wrt4ml30 New Member in Splunk Cloud Platform yesterday 0 1	0	1
Splunk Observability Cloud MS SQL Server Monitor Discovery error Hi Team, I am exploring the splunk Observability CLoud with MS SQL Server Monitor. Collector has been deployed with r... by Arun2 New Member in Splunk Observability Cloud yesterday 0 1	0	1
Checkpoint Harmony log export How to export Checkpoint harmony log (cloud) to our Splunk (on-prem) ? by seaswallowmex Engager in Splunk Enterprise yesterday 0 1	0	1
How to send log from Wordpress or PHP website to Splunk? We want to send custom logs from Wordpress Website to Splunk account. We already have a Splunk account. We tried with... by sumitmove New Member in Getting Data In Sunday 0 3	0	3
Change Account Username and Email My splunk.com account is registered to an email address that no longer exists, so I can't receive mail at it. There's... by sheryaramalik Engager in Splunk Enterprise Sunday 1 2	1	2
Salesforce integration with Splunk Hello Splunkers,I have a question around integration of Salesforce with Splunk , I see there are two Add-on available... by mohsplunking Path Finder in Splunk Enterprise Security Sunday 0 1	0	1
Case #4117119 — No update on Splunk ID / Pearson VUE registration I registered for a Splunk ID via the Pearson VUE registration form and did not receive it within the stated 2–3 busin... by nihalmukadam New Member in Training + Certification Discussions Sunday 0 1	0	1
Splunk.License: failed to add because: cannot add lic w/ subgroupId=DevTest:xxxxx@xxxx.com to stack w/ subgroupId=Production I am trying to install my Dev License to my local Splunk Instance but am getting the following error. Splunk.License:... by viewpost_rgora Explorer in Installation Saturday 4 16	4	16
Has anyone created a Splunk search using IBM z/OS SMF type 70 records and calculated the CPU percentage? We are trying to replicate some data that was in an RMF report and imported into Excel for a graph. We are trying to... by bdh5574 New Member in Splunk Search Friday 0 4	0	4
Cleaning up inputs I have inherited Splunk and I've been in the process of cleaning up 2 of the heavy forwarder and 2 syslog uni forward... by 709_miner Loves-to-Learn Everything in Splunk Enterprise Friday 0 1	0	1
Where spl2-orchestrator.log file rotation configured? I looked in the SPLUNK_HOME/etc/log.cfg and local-log.cfg and can't find any stanzas to change it. I ask because it i... by ravidaj Engager in Splunk Enterprise Friday 2 2	2	2
Splunk DB Connect: How to set correct timezone for Splunk DB Connect feeds? Hi Splunkers, we have DB with events in UTC which differs from local timezone. Setting up TZ (timezone) in props.con... by evelenke Contributor in All Apps and Add-ons Thursday 2 13	2	13
Paessler PRTG Modular Input “After upgrading Splunk to 10.2, the apps are no longer usable. May I know if there are any methods to collect PRTG l... by Alan_Chan Explorer in Monitoring Splunk Thursday 0 1	0	1
Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26 You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at .conf26 on We... by bmeister Splunk Employee in Community Blog Thursday 0 0	0	0

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

SPL Find difference from previous day from a DB Source

Error while trying to configure app PureStorage Unified addon: Error: Request failed with status code 500

AI AGENT BUILDATHON - TERMS & CONDITIONS / OFFICIAL RULES

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Entity Risk Reduction upon False Positive disposition

App setup

Zabbix Add-on For Splunk

Trying to use .* as input parameter of an action when there are multiple values in the list

Customer Portal Login Issue

Data Management Digest – August 2026

Newly verified Splunk account incorrectly says all Cloud trials have been used; existing-trials link returns 404.

Splunk Observability Cloud MS SQL Server Monitor Discovery error

Checkpoint Harmony log export

How to send log from Wordpress or PHP website to Splunk?

Change Account Username and Email

Salesforce integration with Splunk

Case #4117119 — No update on Splunk ID / Pearson VUE registration

Splunk.License: failed to add because: cannot add lic w/ subgroupId=DevTest:xxxxx@xxxx.com to stack w/ subgroupId=Production

Has anyone created a Splunk search using IBM z/OS SMF type 70 records and calculated the CPU percentage?

Cleaning up inputs

Where spl2-orchestrator.log file rotation configured?

Splunk DB Connect: How to set correct timezone for Splunk DB Connect feeds?

Paessler PRTG Modular Input

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Meet the SplunkTrust

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Data Management Digest – August 2026

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources