Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 3,163 Online 158K Posts

Join us for a 4-part series on Full-Stack Observability: For the AI Era consisting of a Webinar, Tech Talk, interactive Lab, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More from Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key use cases for Security, Observability, Industries, AI, and Cisco. We also host valuable ...

Splunk Employee

on Community Blog 10 hours ago

The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise

The Trust Gap: Why a data foundation is fundamental to an Agentic Enterprise. Agentic AI is transforming the enterprise, but its success hinges on one critical factor: trust. Without robust ...

Splunk Employee

on Webinars 12 hours ago

Data Management Digest – September 2026

Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of momentum to data management. Edge Processor Hybrid gives teams a way to modernize ingestion ...

Splunk Employee

on Product News & Announcements Friday

142

Federated Search for CloudWatch Unified Data Store Is Generally Available

As organizations modernize their cloud environments, AWS workloads generate more security, operational, and application telemetry than ever before. That data is valuable—but it does not always need to ...

Splunk Employee

on Product News & Announcements Friday

119

	How to configure Splunk DB Connect for Trellix ePO (ESS 5.x) audit log ingestion to meet STIG compliance? We needed to ingest Trellix/McAfee ePO audit logs (dbo.OrionAuditLog) into Splunk using DB Connect while establishing... by youngso SplunkTrust in All Apps and Add-ons 31m ago 0 1	0	1
	Clickable link in an alert email Good afternoon,I am trying to generate an alert email with a clickable link included. What is the correct way to do a... by torustad Path Finder in Splunk Enterprise 4 hours ago 0 1	0	1
	Blacklist files by content We have all of our Windows workstations sending PowerShell transcripts to a central drop share for ingest. This work... by jdmeek Explorer in Getting Data In 4 hours ago 0 1	0	1
	Does Splunk ITSI 4.21 support per-entity adaptive thresholding or not? There are conflicting statements in Splunk ITSI 4.21 documentation about being able to use adaptive thresholding on p... by andrew_f_trobec Explorer in Splunk Enterprise 4 hours ago 0 1	0	1
	Issues after upgrade to 10.6.0.5 Hi all,after upgrading Splunk Enterprise from 10.4.3 to 10.6.0.5 there are some issues:Management of apps isn't worki... by TheExpert Path Finder in Splunk Enterprise 6 hours ago 0 1	0	1
	LineBreakingProcessor and structuredparsing doesn't obey TRUNCATE Hi,I seem to receive warnings like the one below:LineBreakingProcessor [1616 structuredparsing] - Truncating line bec... by kaurinko Communicator in Splunk Enterprise 6 hours ago 0 3	0	3
	Test weed, by kh_test New Member in Feedback 8 hours ago 0 0	0	0
	Full-Stack Observability Office Hours: Ask the Experts Full-Stack Observability Office Hours: Ask the ExpertsOctober 22nd 2026 \| 11:00am – 12:00pm PT As AI reshapes appli... by Anam Community Manager in Community Office Hours 8 hours ago 0 0	0	0
	Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More from Splunk Lantern Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key use ca... by KayeChapman Splunk Employee in Community Blog 10 hours ago 0 0	0	0
	The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise The Trust Gap: Why a data foundation is fundamental to an Agentic Enterprise. Agentic AI is transforming the enter... by LesediK Splunk Employee in Webinars 12 hours ago 0 0	0	0
	Add zone tags to data passing HFs Hello If I has several network zones and a HF in each zone forwarding logs to indexer cluster, what would be the best... by Jasem New Member in Getting Data In 18 hours ago 0 0	0	0
	Splunkd logs are registering in Russian Language In our environment the Splunkd.log are registering in Russian and English language.Kindly refer to the attached scree... by Prudhvi_k Loves-to-Learn Lots in Splunk Cloud Platform yesterday 0 0	0	0
	How do we handle UFs in the enterprise? We have roughly 10k-15k UFs in the company and we wonder in which route to go for ongoing maintenance of the UFs, whe... by ddrillic Ultra Champion in Deployment Architecture Saturday 0 5	0	5
	Splunk HF parallel pipelines utilization Hi, We have high-volume syslog input configured on a HF with Splunk v.7.2.5 and we started noticing TailReader-0 pip... by vanvan Path Finder in Monitoring Splunk Saturday 0 4	0	4
	Hourly Test Hello all, I am very new to Splunk so apologies if this is an easy one. We want to set up an alert to come out of Spl... by Matt_Splunk Observer in Splunk Search Saturday 0 5	0	5
	Add icon to Modern UI navigation bar? Hey there, in the new modern UI, is there any way to use custom icons in the navigation bar? That is, other than the... by BradOH Path Finder in Splunk Enterprise Friday 0 0	0	0
	Splunk hosted instance of the BOTS v1.0 dataset I'm trying to access the Splunk hosted instance of the BOTS v1.0 dataset and the link"Splunk Security Dataset Project... by eucrates New Member in Training + Certification Discussions Friday 0 0	0	0
	Data Management Digest – September 2026 Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of momentum to da... by MichelleCorpora Splunk Employee in Product News & Announcements Friday 0 0	0	0
	Federated Search for CloudWatch Unified Data Store Is Generally Available As organizations modernize their cloud environments, AWS workloads generate more security, operational, and applicati... by kwheeler Splunk Employee in Product News & Announcements Friday 0 0	0	0
	integration intune with splunk cloud Guys please help me on how integrate Microsoft Intune to Splunk cloud via graph Api.anyone having SOP please share no... by prajapatidaksh New Member in Splunk Cloud Platform Friday 0 1	0	1
	Splunk Add-on for AWS: IAM User works for RDS CloudWatch logs, but IAM Role only paginates DescribeLogStreams Hi everyone,I'm troubleshooting a Splunk Add-on for AWS CloudWatch Logs input that collects Amazon RDS Oracle audit l... by lary925 Observer in All Apps and Add-ons Friday 0 0	0	0
	Why Search Head Clustering is always show pending? Some Search Heads show "Up" status but other search heads are always show "Pending". I want to know that how to solve... by Beginner2 Observer in Deployment Architecture Thursday 0 1	0	1
	Office Hours \| Ask the Experts: AI Powered Observability “AI + Observability Office Hours: Ask the Experts”October 6, 2026 \| 11:00am – 12:00pm PT AI is transforming the appli... by Anam Community Manager in Community Office Hours Thursday 0 0	0	0
	Announcing Modern Navigation: A New Era of Splunk User Experience We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and on-prem... by PreranaD Splunk Employee in Product News & Announcements Thursday 0 16	0	16
	Hierarchy within the waslogs monitor stanzas I encountered an interesting case involving a hierarchical set of monitor stanzas within the complex waslogs configur... by ddrillic Ultra Champion in Getting Data In Thursday 0 4	0	4

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

How to configure Splunk DB Connect for Trellix ePO (ESS 5.x) audit log ingestion to meet STIG compliance?

Clickable link in an alert email

Blacklist files by content

Does Splunk ITSI 4.21 support per-entity adaptive thresholding or not?

Issues after upgrade to 10.6.0.5

LineBreakingProcessor and structuredparsing doesn't obey TRUNCATE

Test

Full-Stack Observability Office Hours: Ask the Experts

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More from Splunk Lantern

The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise

Add zone tags to data passing HFs

Splunkd logs are registering in Russian Language

How do we handle UFs in the enterprise?

Splunk HF parallel pipelines utilization

Hourly Test

Add icon to Modern UI navigation bar?

Splunk hosted instance of the BOTS v1.0 dataset

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

integration intune with splunk cloud

Splunk Add-on for AWS: IAM User works for RDS CloudWatch logs, but IAM Role only paginates DescribeLogStreams

Why Search Head Clustering is always show pending?

Office Hours | Ask the Experts: AI Powered Observability

Announcing Modern Navigation: A New Era of Splunk User Experience

Hierarchy within the waslogs monitor stanzas

Meet the SplunkTrust

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More from Splunk ...

The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources