Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 1,091 Online 158K Posts

Ready to Level Up? Here Are 3 Ways AI Can Optimize Your Day.

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find the Root Cause

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod just sits in Pending, the rollout never finishes, and a minute later I get an alert that ...

Splunk Employee

on Community Blog 4 hours ago

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing repeated field extraction - with no detection rewrites or historical reindexing required. Key ...

Splunk Employee

on Product News & Announcements Tuesday

214

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or the ability to rebuild your security environment. At Cisco Live APJC, Splunk by Cisco is ...

Splunk Employee

on Product News & Announcements Tuesday

243

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, and the outcomes they deliver. Understanding token consumption is part of the picture. ...

Community Manager

on Community Blog Monday

177

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find the Root Cause Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod just s... by CaitlinHalla Splunk Employee in Community Blog 4 hours ago 0 0	0	0
"AlertNotifier busy... Consider improving action execution speed or increase action_execution_threads in limits.conf" How to increase the limit? I have very large number (over hundred) of scheduled searches done every minute. Some have alert actions to send an e... by lukasz92 Communicator in Alerting 7 hours ago 0 3	0	3
SplunkES Pairing: Fetching role-mapping failed: [HTTP 500] Hello SplunkSOAR Engineer,We have Search head cluster ( three SH Memebers represented by DNS record ) and Standby Spl... by 0xAli Path Finder in Splunk SOAR 9 hours ago 0 0	0	0
Message Trace Ingestion Failing with 403 Forbidden Error Hello,I'm currently onboarding Microsoft Office 365 logs into Splunk using the Splunk Add-on for Microsoft Office 365... by NightOwl2212 Observer in Getting Data In 9 hours ago 0 4	0	4
Splunk Enterprise Migration from VM Ware to Nutanix We are exploring the possibility of migrating our existing Splunk infrastructure from VMware to Nutanix.Our environme... by yasir Loves-to-Learn Everything in Installation 10 hours ago 0 0	0	0
How to Secure Sensitive Data Before AI Processing? As organizations increasingly adopt AI tools for automation, analytics, and decision-making, protecting sensitive dat... by romquestaai_gma New Member in Deployment Architecture yesterday 0 4	0	4
Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index Hi Splunk Community,I’m looking for guidance on implementing an accurate Mean Time to Detect (MTTD) calculation for o... by karishmajain Loves-to-Learn Lots in Splunk Search yesterday 0 10	0	10
splunk-lauch.conf variables, with python Hello, is there a documentation regarding several splunk-launch.conf variables for python like SSL_VERIFY, SSL_CERT_... by splunkreal Influencer in All Apps and Add-ons yesterday 0 2	0	2
Request for a Splunk Add-on for Huawei WLAN Access Controller (AC6805 / AirEngine) We are onboarding Huawei WLAN Access Controllers into Splunk Enterprise and Enterprise Security. We could not find an... by splunker_ak Explorer in Splunk Enterprise yesterday 0 1	0	1
Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing repeated fie... by GregZiemiecki Splunk Employee in Product News & Announcements Tuesday 0 0	0	0
What's New in Splunk Enterprise Security 8.8 and Beyond Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or the ab... by milenachen Splunk Employee in Product News & Announcements Tuesday 0 0	0	0
Ingesting all WIZ vulnerabilities I am trying to use this app to ingest vulnerabilities but it seems like I am getting rate-limited. Anyone else having... by _joe Contributor in Getting Data In Tuesday 0 5	0	5
Custom provider issue with AI toolkit Hello, getting error with AI toolkit and custom provider (litellm), anyone managed to make it work?splunk server 9.3.... by splunkreal Influencer in All Apps and Add-ons Tuesday 0 9	0	9
A Four-Part Event Series: State of Observability - Where AI Meets Performance As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, and the ... by Anam Community Manager in Community Blog Monday 0 0	0	0
Drowning in Postgres initialization errors Hi, my 10.0.3 systems (SH, DS and indexers) send me several hundred postgres errors each day that seem to indicate th... by afx Contributor in Splunk Enterprise Sunday 2 3	2	3
Splunk DB Connect – Unable to Establish SQL Server 2016 Connection Due to SSL Certificate Validation Error Hello ,I'm trying to establish a database connection using Splunk DB Connect to Microsoft SQL Server 2016. However, t... by NightOwl2212 Observer in Getting Data In Sunday 0 5	0	5
New Member Introduction – Excited to Join the Splunk Community Hello everyone,I’m happy to be part of the Splunk Community. As a new member, I look forward to learning from experie... by dotmirror Engager in Training + Certification Discussions Sunday 2 1	2	1
Splunk enterprise installation \|\|Server limits Are the bellow limits reasonable ? the source:Performance tuning the indexing tier - Splunk Lanternat Linux-specific... by Wohamed_wakkad Path Finder in Splunk Enterprise Sunday 0 1	0	1
Persistent Queue at TcpOut — One of Splunk's Most Practical Features Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in recent ... by hrawat Splunk Employee in Community Blog Friday 4 2	4	2
Build resilience for the agentic era: Join us at Splunk Go San Jose AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and expand the... by melissap Splunk Employee in Community Blog Friday 1 0	1	0
Is there a version of Spur Enrichment for Splunk that supports python 3.13? Is there a version of Spur Enrichment for Splunk that supports python 3.13? by corkyman New Member in Splunk Dev Friday 0 2	0	2
HEC indexer ack on Edge processor with Kafka connect Hello, on Edge processor on premises, adding the Channel ID header to your request will not enable end-to-end acknowl... by splunkreal Influencer in Getting Data In Friday 0 0	0	0
AI Toolkit to local OLLAMA server connection AI Toolkit cannot make a connection to local OLLAMA server. It gives an error saying that litellm is missing and is n... by unluakin Loves-to-Learn Lots in All Apps and Add-ons Friday 0 6	0	6
Challenges with data replay using: fill_summary_index.py via CLI IHAC that is trying to replay circa 6 months worth of data into a summary index, the data is dense and it fails using... by NullZero Communicator in All Apps and Add-ons Friday 0 2	0	2
Automatically assign sourcetype based on filename and use wildcards in sourcetypes I need to ingest around 60-80 new file types into our system.Each file is an application log and because of how we op... by zapping575 Communicator in Getting Data In a week ago 1 5	1	5

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find the Root Cause

"AlertNotifier busy... Consider improving action execution speed or increase action_execution_threads in limits.conf" How to increase the limit?

SplunkES Pairing: Fetching role-mapping failed: [HTTP 500]

Message Trace Ingestion Failing with 403 Forbidden Error

Splunk Enterprise Migration from VM Ware to Nutanix

How to Secure Sensitive Data Before AI Processing?

Title: How to Calculate Mean Time to Detect (MTTD) Using Splunk ES Notable index

splunk-lauch.conf variables, with python

Request for a Splunk Add-on for Huawei WLAN Access Controller (AC6805 / AirEngine)

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

What's New in Splunk Enterprise Security 8.8 and Beyond

Ingesting all WIZ vulnerabilities

Custom provider issue with AI toolkit

A Four-Part Event Series: State of Observability - Where AI Meets Performance

Drowning in Postgres initialization errors

Splunk DB Connect – Unable to Establish SQL Server 2016 Connection Due to SSL Certificate Validation Error

New Member Introduction – Excited to Join the Splunk Community

Splunk enterprise installation ||Server limits

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Is there a version of Spur Enrichment for Splunk that supports python 3.13?

HEC indexer ack on Edge processor with Kafka connect

AI Toolkit to local OLLAMA server connection

Challenges with data replay using: fill_summary_index.py via CLI

Automatically assign sourcetype based on filename and use wildcards in sourcetypes

Meet the SplunkTrust

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find the Root Cause

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

What's New in Splunk Enterprise Security 8.8 and Beyond

A Four-Part Event Series: State of Observability - Where AI Meets Performance

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources