Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

122K Members 2,389 Online 157K Posts

Join us for a 4-part series on Splunk Agent Observability consisting of Webinar, Tech Talk, Workshop, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Office Hours

Webinar-style deep dives and workshops for hands-on guidance

Community Activity

Cleaning up inputs I have inherited Splunk and I've been in the process of cleaning up 2 of the heavy forwarder and 2 syslog uni forward... by 709_miner Loves-to-Learn Everything in Splunk Enterprise 45m ago 0 1	0	1
Change Account Username and Email My splunk.com account is registered to an email address that no longer exists, so I can't receive mail at it. There's... by sheryaramalik New Member in Splunk Enterprise 51m ago 0 1	0	1
Where spl2-orchestrator.log file rotation configured? I looked in the SPLUNK_HOME/etc/log.cfg and local-log.cfg and can't find any stanzas to change it. I ask because it i... by ravidaj Engager in Splunk Enterprise 7 hours ago 2 2	2	2
Splunk Observability Cloud MS SQL Server Monitor Discovery error Hi Team, I am exploring the splunk Observability CLoud with MS SQL Server Monitor. Collector has been deployed with r... by Arun2 New Member in Splunk Observability Cloud 8 hours ago 0 0	0	0
Splunk DB Connect: How to set correct timezone for Splunk DB Connect feeds? Hi Splunkers, we have DB with events in UTC which differs from local timezone. Setting up TZ (timezone) in props.con... by evelenke Contributor in All Apps and Add-ons yesterday 2 13	2	13
Paessler PRTG Modular Input “After upgrading Splunk to 10.2, the apps are no longer usable. May I know if there are any methods to collect PRTG l... by Alan_Chan Explorer in Monitoring Splunk yesterday 0 1	0	1
Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26 You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at .conf26 on We... by bmeister Splunk Employee in Community Blog yesterday 0 0	0	0
Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security are no ... by hilal Observer in Community Blog yesterday 1 0	1	0
Salesforce integration with Splunk Hello Splunkers,I have a question around integration of Salesforce with Splunk , I see there are two Add-on available... by mohsplunking Path Finder in Splunk Enterprise Security yesterday 0 0	0	0
Splunk Add-on for F5 BIG-IP Integration Parsing Issue with Telemetry Streaming Sourcetypes for Splunk ITSI Hi Everyone,I have an existing F5 integration using Splunk Add-on for F5 BIG-IP configured to send Syslog and ASM log... by desaye Engager in Knowledge Management yesterday 0 2	0	2
Smartstore SignatureDoesNotMatch Error I am trying to setup a new cluster with smartstore to an S3 compliant DELL storage and failing. The configuration is ... by prad87 Explorer in Getting Data In yesterday 0 2	0	2
Customer Portal Login Issue I am currently unable to log into the Splunk Support Portal. The system continuously attempts to redirect me to the P... by szutsmarcell New Member in Training + Certification Discussions yesterday 0 0	0	0
Cloned Destinations: blockOnCloning Could someone confirm the expected outcome for the following settings: outputs.conf [tcpout:group1] server = 192.168... by ak_sky Engager in Getting Data In Wednesday 1 7	1	7
Checkpoint Harmony log export How to export Checkpoint harmony log (cloud) to our Splunk (on-prem) ? by seaswallowmex New Member in Splunk Enterprise Wednesday 0 0	0	0
Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Do you ever feel like you’... by LesediK Splunk Employee in Splunk Tech Talks Wednesday 0 1	0	1
Build and Launch AI Agents from Your Splunk Workflows Replay Tech Talk Build and Launch AI Agents from Your Splunk Workflows We’ve all been there: juggling alerts, ru... by LesediK Splunk Employee in Splunk Tech Talks Wednesday 0 1	0	1
Trying to Enroll on a course But just get the 'See Classes to Enroll' button Aside form the intro to splunk and the field search one, each time i try to do a new course i just get hit with this.... by Joshu New Member in Training + Certification Discussions Wednesday 0 0	0	0
index This \| What kind of room has no doors? IndexEducation Cover Art Banner Cisco.png August 2026 Edition Hayyy Splunk Education Enthusiasts and the Eternally C... by cskokos_splunk Splunk Employee in Training & Certification Blog Wednesday 0 0	0	0
Optimize AI at Scale: Must-Attend Observability Sessions at .conf26 conf26 With nearly 70 breakout sessions on the docket, the .conf26 Observability track is designed to help teams cu... by ArifV Splunk Employee in Community Blog Wednesday 0 0	0	0
Trying to use .* as input parameter of an action when there are multiple values in the list Successful when using finding:consolidated_findings.example.0 or finding:consolidated_findings.example.1 but not when... by jjkel Observer in Splunk SOAR Wednesday 0 3	0	3
Integrity check warning Hello,I recently upgraded my Splunk instances to version 10.4.x and started seeing integrity check warnings affecting... by BRFZ Communicator in Splunk Enterprise Wednesday 0 1	0	1
How much can you really learn in 3 minutes? Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to change all ... by gleffler Splunk Employee in Community Blog Tuesday 0 0	0	0
JSON Feed Parsing for URL-Based Threat Intelligence in Splunk ES 8.x Hi,Does Splunk Enterprise Security 8.x support JSON feeds directly as a URL-based threat intelligence source?If yes, ... by Latefa New Member in Splunk Enterprise Security Tuesday 0 0	0	0
SOAR callback to ES fails certificate verification after upgrade from ES 8.2.x to 8.5.1 We upgraded an on-premises Splunk Enterprise Security search-head cluster from ES 8.2.x to ES 8.5.1.Before the upgrad... by Scriabin New Member in Splunk SOAR Tuesday 0 1	0	1
Splunk Dashboard: use tokens in dropdown query source inputlookup Hi, here is the description.In a dashboard there is time range picker with its token time_tkn and 2 dropdowns.The fir... by spisiakmi Builder in Dashboards & Visualizations Monday 1 11	1	11

View More Posts

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at .conf26 on Wednesday Looking to dive into Splunk? Join one of our Product Focus Sessions on ...

Splunk Employee

on Community Blog yesterday

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security are no strangers to alert fatigue. A high-severity notable fires, and an analyst ...

Observer

on Community Blog yesterday

362

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Do you ever feel like you’re trying to solve a puzzle where the pieces are scattered across five different ...

Splunk Employee

on Splunk Tech Talks Wednesday

620

Build and Launch AI Agents from Your Splunk Workflows

Replay Tech Talk Build and Launch AI Agents from Your Splunk Workflows We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could turn that operational ...

Splunk Employee

on Splunk Tech Talks Wednesday

447

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Cleaning up inputs

Change Account Username and Email

Where spl2-orchestrator.log file rotation configured?

Splunk Observability Cloud MS SQL Server Monitor Discovery error

Splunk DB Connect: How to set correct timezone for Splunk DB Connect feeds?

Paessler PRTG Modular Input

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Salesforce integration with Splunk

Splunk Add-on for F5 BIG-IP Integration Parsing Issue with Telemetry Streaming Sourcetypes for Splunk ITSI

Smartstore SignatureDoesNotMatch Error

Customer Portal Login Issue

Cloned Destinations: blockOnCloning

Checkpoint Harmony log export

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Build and Launch AI Agents from Your Splunk Workflows

Trying to Enroll on a course But just get the 'See Classes to Enroll' button

index This | What kind of room has no doors?

Optimize AI at Scale: Must-Attend Observability Sessions at .conf26

Trying to use .* as input parameter of an action when there are multiple values in the list

Integrity check warning

How much can you really learn in 3 minutes?

JSON Feed Parsing for URL-Based Threat Intelligence in Splunk ES 8.x

SOAR callback to ES fails certificate verification after upgrade from ES 8.2.x to 8.5.1

Splunk Dashboard: use tokens in dropdown query source inputlookup

Meet the SplunkTrust

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Build and Launch AI Agents from Your Splunk Workflows

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources