Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 948 Online 158K Posts

Ready to Level Up? Here Are 3 Ways AI Can Optimize Your Day.

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and expand their use of AI, they also face new questions: How can they keep AI systems reliable? ...

Splunk Employee

on Community Blog an hour ago

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline to it, and prove the pipeline works with a canary event. The complete path is: event ...

Splunk Employee

on Community Blog Wednesday

Splunk Brings Proof of Control to Digital Asset Transfers

Digital assets now sit inside the core of financial services. HSBC launched its Tokenized Deposit Service in the United States in April 2026. BlackRock issued its first tokenized fund on a public ...

Splunk Employee

on Community Blog Wednesday

Manage Ingest Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Ingest Processor pipeline, deploy it to the Splunk-managed runtime, and prove the pipeline works with a canary event. The complete path is: Splunk ...

Splunk Employee

on Community Blog Wednesday

Build resilience for the agentic era: Join us at Splunk Go San Jose AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and expand the... by melissap Splunk Employee in Community Blog an hour ago 0 0	0	0
Drowning in Postgres initialization errors Hi, my 10.0.3 systems (SH, DS and indexers) send me several hundred postgres errors each day that seem to indicate th... by afx Contributor in Splunk Enterprise 2 hours ago 2 2	2	2
Is there a version of Spur Enrichment for Splunk that supports python 3.13? Is there a version of Spur Enrichment for Splunk that supports python 3.13? by corkyman New Member in Splunk Dev 2 hours ago 0 2	0	2
HEC indexer ack on Edge processor with Kafka connect Hello, on Edge processor on premises, adding the Channel ID header to your request will not enable end-to-end acknowl... by splunkreal Influencer in Getting Data In 6 hours ago 0 0	0	0
splunk-lauch.conf variables, with python Hello, is there a documentation regarding several splunk-launch.conf variables for python like SSL_VERIFY, SSL_CERT_... by splunkreal Influencer in All Apps and Add-ons 7 hours ago 0 0	0	0
AI Toolkit to local OLLAMA server connection AI Toolkit cannot make a connection to local OLLAMA server. It gives an error saying that litellm is missing and is n... by unluakin Loves-to-Learn Lots in All Apps and Add-ons 7 hours ago 0 6	0	6
Challenges with data replay using: fill_summary_index.py via CLI IHAC that is trying to replay circa 6 months worth of data into a summary index, the data is dense and it fails using... by NullZero Communicator in All Apps and Add-ons 7 hours ago 0 2	0	2
Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index Hi Splunk Community,I’m looking for guidance on implementing an accurate Mean Time to Detect (MTTD) calculation for o... by karishmajain Loves-to-Learn Lots in Splunk Search yesterday 0 1	0	1
Splunk DB Connect – Unable to Establish SQL Server 2016 Connection Due to SSL Certificate Validation Error Hello ,I'm trying to establish a database connection using Splunk DB Connect to Microsoft SQL Server 2016. However, t... by NightOwl2212 Observer in Getting Data In yesterday 0 4	0	4
Ingesting all WIZ vulnerabilities I am trying to use this app to ingest vulnerabilities but it seems like I am getting rate-limited. Anyone else having... by _joe Contributor in Getting Data In yesterday 0 4	0	4
Automatically assign sourcetype based on filename and use wildcards in sourcetypes I need to ingest around 60-80 new file types into our system.Each file is an application log and because of how we op... by zapping575 Communicator in Getting Data In yesterday 1 5	1	5
Manage Edge Processor pipelines end to end with APIs This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline to it, ... by mndeveci Splunk Employee in Community Blog Wednesday 0 0	0	0
Splunk Brings Proof of Control to Digital Asset Transfers Digital assets now sit inside the core of financial services. HSBC launched its Tokenized Deposit Service in the Unit... by AqibKazi Splunk Employee in Community Blog Wednesday 0 0	0	0
Manage Ingest Processor pipelines end to end with APIs This guide uses the Data Management APIs to create an Ingest Processor pipeline, deploy it to the Splunk-managed runt... by mndeveci Splunk Employee in Community Blog Wednesday 0 0	0	0
Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Watch on demand us for a demo-driven look at ... by LesediK Splunk Employee in Splunk Tech Talks Wednesday 0 2	0	2
Splunk Enterprise Security: An Automated Phishing Response Workflow Originally posted on Splunk.com. Key takeaways The volume of phishing emails can overwhelm even the most dedicated... by abheyk Splunk Employee in Community Blog Tuesday 0 0	0	0
Sharper ES Detections, Agentic AI Integrations, Smarter Workload Management, and More from Splunk Lantern Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key use ca... by KayeChapman Splunk Employee in Community Blog Tuesday 0 0	0	0
Message Trace Ingestion Failing with 403 Forbidden Error Hello,I'm currently onboarding Microsoft Office 365 logs into Splunk using the Splunk Add-on for Microsoft Office 365... by NightOwl2212 Observer in Getting Data In Tuesday 0 0	0	0
Why are we experiencing this Error "authentication failure on Phantom 4.10"? We are using Prompt with extended time to 4 days. We have discovered that when the time of running playbook is over t... by mrzn New Member in Splunk SOAR Tuesday 0 3	0	3
g suite integration to Splunk platform gmail logs ingestion to Splunk platform. pls do share for any pointers. by manas123 New Member in Getting Data In Tuesday 0 1	0	1
First time - How to configure Alerting in Splunk This was the first time in our clustered Splunk instance which contains 3 Search heads and one AWS ALB attached to it... by Karthikeya Communicator in Splunk Enterprise Tuesday 0 4	0	4
Global config JSON file not found!` error in `sendtophantom` modular alert despite placing `globalConfig.json` across ca Hi everyone,I am facing an persistent issue with the Splunk Add-on for Phantom (`sendtophantom` modular action) when ... by kn450 Explorer in Splunk SOAR Monday 0 0	0	0
How would you ingest AI-image review CSV metadata into Splunk without the images? I am planning a small provenance-review workflow for image submissions to an editorial team. The team may check batch... by eeaichekkaa New Member in Getting Data In Monday 0 1	0	1
How should Splunk track human review of AI-generated draft text without storing the draft? I am designing a review trail for a small editorial workflow. The content team checks Japanese and English draft arti... by eeaichekkaa New Member in All Apps and Add-ons Monday 0 1	0	1
SC4S parsing issues I have set SC4S up using Docker CE and systemd. In env file, I have a HEC endpoint url and a custom UDP port open, he... by Jasem Explorer in Getting Data In Monday 0 1	0	1

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Build resilience for the agentic era: Join us at Splunk Go San Jose

Drowning in Postgres initialization errors

Is there a version of Spur Enrichment for Splunk that supports python 3.13?

HEC indexer ack on Edge processor with Kafka connect

splunk-lauch.conf variables, with python

AI Toolkit to local OLLAMA server connection

Challenges with data replay using: fill_summary_index.py via CLI

Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index

Splunk DB Connect – Unable to Establish SQL Server 2016 Connection Due to SSL Certificate Validation Error

Ingesting all WIZ vulnerabilities

Automatically assign sourcetype based on filename and use wildcards in sourcetypes

Manage Edge Processor pipelines end to end with APIs

Splunk Brings Proof of Control to Digital Asset Transfers

Manage Ingest Processor pipelines end to end with APIs

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Splunk Enterprise Security: An Automated Phishing Response Workflow

Sharper ES Detections, Agentic AI Integrations, Smarter Workload Management, and More from Splunk Lantern

Message Trace Ingestion Failing with 403 Forbidden Error

Why are we experiencing this Error "authentication failure on Phantom 4.10"?

g suite integration to Splunk platform

First time - How to configure Alerting in Splunk

Global config JSON file not found!` error in `sendtophantom` modular alert despite placing `globalConfig.json` across ca

How would you ingest AI-image review CSV metadata into Splunk without the images?

How should Splunk track human review of AI-generated draft text without storing the draft?

SC4S parsing issues

Meet the SplunkTrust

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs

Splunk Brings Proof of Control to Digital Asset Transfers

Manage Ingest Processor pipelines end to end with APIs

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources