Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 3,355 Online 158K Posts

Join us for a 4-part series on Full-Stack Observability: For the AI Era consisting of a Webinar, Tech Talk, interactive Lab, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26

At .conf26 in Denver, I spent much of my time in conversation with Splunk customers about Splunk AI Assistant. Those conversations happened in two settings. Many began with a demo I built to show a ...

Splunk Employee

on Community Blog yesterday

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents. Thursday, November 12, 2026 | 11AM PST / 2PM EST Register In this Tech Talk, Splunk platform specialists walk through Cisco Data Fabric, powered by ...

Splunk Employee

on Splunk Tech Talks Thursday

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. The key point is that asynchronous forwarding became possible because the behavior behind ...

Splunk Employee

on Community Blog Thursday

530

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in Barcelona, and the app returns a long, padded response with extra details and suggestions ...

Splunk Employee

on Community Blog Thursday

150

Custom provider issue with AI toolkit Hello, getting error with AI toolkit and custom provider (litellm), anyone managed to make it work?splunk server 9.3.... by splunkreal Influencer in All Apps and Add-ons 10m ago 0 4	0	4
DB Connect CyberArk identity: how do I use a CCP endpoint other than /AIMWebService/ for client-certificate auth? Hi all,I'm setting up a CyberArk identity in Splunk DB Connect to fetch a database password from CyberArk CCP. It use... by Sierra New Member in All Apps and Add-ons an hour ago 0 1	0	1
Could you please make a more future-proof choice regarding your KVStore database and stick with it in a longer term? @splunkEnt. product management/development: Could you please make a more future-proof choice regarding your KVStore d... by apietersen Contributor in Splunk Enterprise 3 hours ago 0 0	0	0
Disable SSL verification Hello,How do I disable SSL verification on the Invicti Platform add-on?Is this a replacement for the net sparker app ... by _joe Contributor in Getting Data In yesterday 0 1	0	1
Ingesting all WIZ vulnerabilities I am trying to use this app to ingest vulnerabilities but it seems like I am getting rate-limited. Anyone else having... by _joe Contributor in Getting Data In yesterday 0 3	0	3
Problem with splunk forwarder We're running Splunk Ent 9.4.15. We have a number of forwarders configured. All of them are working except one, which... by trile757 Engager in Getting Data In yesterday 0 8	0	8
Proxy settings Hello, could you clarify where and how proxy settings should be in splunk-launch.conf or somewhere else? Also should ... by splunkreal Influencer in Splunk Enterprise yesterday 0 4	0	4
How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26 At .conf26 in Denver, I spent much of my time in conversation with Splunk customers about Splunk AI Assistant. Those ... by AqibKazi Splunk Employee in Community Blog yesterday 0 0	0	0
How to Secure Sensitive Data Before AI Processing? As organizations increasingly adopt AI tools for automation, analytics, and decision-making, protecting sensitive dat... by romquestaai_gma New Member in Deployment Architecture yesterday 0 3	0	3
Federation 2.0: Explore the Latest Capabilities and Offerings [Watch on demand HERE]. This thread is for the Community Office Hours session on Federation 2.0: Explore the Latest C... by rederada Splunk Employee in Community Office Hours yesterday 0 1	0	1
Splunk MCP Server not showing indexes in distributed search Hello,I've installed Splunk MCP Server in a distributed environment on a Search Head.When executing the get_indexes i... by Andre_ Communicator in All Apps and Add-ons yesterday 0 11	0	11
SPLUNK ES 8.2.3 Drill Down not appearing I am facin big issue while creating use case on splunk and adding the drill down on the content management. I went to... by AbuNAM8 New Member in Splunk Search yesterday 0 3	0	3
Using DV Ai assistant in Splunk search query Hello, great job, this app is great and working with custom endpoint!However is it possible to call it like \| ai dir... by splunkreal Influencer in All Apps and Add-ons yesterday 0 1	0	1
Platform Office Hour \| AI Powered Data Management Data onboarding, schema mapping, and keeping pipelines healthy—is the manual grind slowing you down?  We’re all lo... by LesediK Splunk Employee in Community Office Hours Monday 0 0	0	0
Drill-down and Next Step are not read in Incident Review Hi There, I got issue Drill-down and Next Step are not read in Incident Review, i create Splunk Lab for Research And ... by zksvc Contributor in Splunk Enterprise Security Monday 0 5	0	5
Am I missing something, or is the Edge Processor restriction not clearly documented? / 500 Error starting: 1 The docs for the Data Management Control Plane / Edge Processor state that the service is not supported on a search h... by Crunchy New Member in Splunk Enterprise Sunday 0 1	0	1
is it possible to customise the tool tip? is it possible to customise the tool tip? We consider using this as a "Change Calendar" and would need some event spe... by Andre_ Communicator in Dashboards & Visualizations Saturday 0 4	0	4
Linux Universal Forwarders not showing latest installed version my Linux machines forwarders were updated from previous versions to 10.0.11 however the splunk agent manager is not s... by CharlySP New Member in Splunk Enterprise Friday 0 3	0	3
Forwarders not connecting to new on-prem Deployment Server Hi all,I'm trying to setup a new Splunk Enterprise deployment server. But my Splunk forwarders seem unable to connect... by eddieddieddie Path Finder in Getting Data In Friday 0 2	0	2
Eventgen not distributing to indexer via HEC or S2S Performed a complete removal and reinstall of SA-Eventgen. Created a minimal configuration using a single sample file... by ASGrover Loves-to-Learn Lots in All Apps and Add-ons Friday 0 3	0	3
Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps) Running Splunk Ent. on windows server-2019. Just upgraded to Splunk Ent. 10.6.1.1. Used a CLI cmd below for upgrading... by apietersen Contributor in Splunk Enterprise Friday 0 4	0	4
Add icon to Modern UI navigation bar? Hey there, in the new modern UI, is there any way to use custom icons in the navigation bar? That is, other than the... by BradOH Path Finder in Splunk Enterprise Thursday 0 1	0	1
Microsoft Teams Add-on for Splunk - Some call records missing I have been using the addon for several months now and it works fine in general however I do find when getting into d... by AH123123 New Member in All Apps and Add-ons Thursday 0 3	0	3
Make Your Machine Data AI-Ready in Splunk Every team is getting ready for AI agents. Thursday, November 12, 2026 \| 11AM PST / 2PM EST Register In this... by LesediK Splunk Employee in Splunk Tech Talks Thursday 0 0	0	0
Splunk Asynchronous Forwarding Explained Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. The ke... by hrawat Splunk Employee in Community Blog Thursday 2 1	2	1

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Custom provider issue with AI toolkit

DB Connect CyberArk identity: how do I use a CCP endpoint other than /AIMWebService/ for client-certificate auth?

Could you please make a more future-proof choice regarding your KVStore database and stick with it in a longer term?

Disable SSL verification

Ingesting all WIZ vulnerabilities

Problem with splunk forwarder

Proxy settings

How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26

How to Secure Sensitive Data Before AI Processing?

Federation 2.0: Explore the Latest Capabilities and Offerings

Splunk MCP Server not showing indexes in distributed search

SPLUNK ES 8.2.3 Drill Down not appearing

Using DV Ai assistant in Splunk search query

Platform Office Hour | AI Powered Data Management

Drill-down and Next Step are not read in Incident Review

Am I missing something, or is the Edge Processor restriction not clearly documented? / 500 Error starting: 1

is it possible to customise the tool tip?

Linux Universal Forwarders not showing latest installed version

Forwarders not connecting to new on-prem Deployment Server

Eventgen not distributing to indexer via HEC or S2S

Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps)

Add icon to Modern UI navigation bar?

Microsoft Teams Add-on for Splunk - Some call records missing

Make Your Machine Data AI-Ready in Splunk

Splunk Asynchronous Forwarding Explained

Meet the SplunkTrust

How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26

Make Your Machine Data AI-Ready in Splunk

Splunk Asynchronous Forwarding Explained

How to Monitor AI Agents with Splunk Agent Observability

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources