Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 1,607 Online 157K Posts

Join us for a 4-part series on Splunk Agent Observability consisting of Webinar, Tech Talk, Workshop, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Office Hours

Webinar-style deep dives and workshops for hands-on guidance

Community Activity

Scaling the Deployment Server (Old Way, new Way) IHAC which has been seeing poor performance on their DS, not surprising as it has over 10,000 hosts calling home and ... by NullZero Communicator in Deployment Architecture 3 hours ago 0 2	0	2
Different output search and where Hello,I have a field that is specified in the interesting fields as numeric (a). However, this field has numeric and ... by Rob1971 New Member in Splunk Search 10 hours ago 0 6	0	6
High CPU Utilization Query not working My SPL code is not returning results.Here is my SPL:index=linux sourcetype=cpu\| eval cpu_busy_pct=round(pctUser + pct... by hotrodbass Engager in Splunk Enterprise 12 hours ago 1 2	1	2
SMTP for exchange Does SMTP auth needs to be enabled at the organization level in order for Splunk to be able to use OAuth to send mail... by mux Explorer in Splunk Enterprise 12 hours ago 0 1	0	1
SOC4Kafka - New Kafka Connector Powered by OpenTelemetry The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards these even... by pszkamruk Splunk Employee in Product News & Announcements 13 hours ago 2 1	2	1
Seeking feedback on SIEM log integrity monitoring Hello, I am a cybersecurity engineering student and I am currently in the final stage of an international cybersecuri... by feridmehtiyev1 New Member in Splunk Enterprise Security 13 hours ago 0 1	0	1
Splunk AI Toolkit / Splunk_SA_Scientific_Python - challenging upgrade IHAC with a C13 SVA instance, I recently upgraded them from Splunk MLTK 5.x to Splunk AI Toolkit 6.0.2 to modernise a... by NullZero Communicator in All Apps and Add-ons 15 hours ago 0 3	0	3
Unable to get daily license consumption details I need to check daily license consumption so I were running - index=_internal source="license_usage.log" type="Roll... by Praz_123 Communicator in Splunk Enterprise yesterday 0 2	0	2
Best way to get support assistanace with the new Free Splunk Observability Cloud I am a new user of Splunk Observability Cloud and have come across what I think may be a defect with Real User Monito... by danvelayo New Member in Splunk Observability Cloud yesterday 0 1	0	1
Rounding off the Splunk Dashboard Contest What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It hangs on m... by livehybrid SplunkTrust in Community Blog Friday 5 0	5	0
A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence is fundame... by Anam Community Manager in Community Blog Friday 0 0	0	0
Data quality, track log formats changes Hello, what would you do to track log changes, maybe using "punct" field?Thanks for your help! by splunkreal Influencer in Monitoring Splunk Friday 0 1	0	1
Splunk Technical Support Is Moving to Cisco Support Tools Introduction Splunk technical support is transitioning to Cisco’s support environment. This change brings Splunk supp... by iamryan Community Manager in Community Blog Friday 0 0	0	0
question regard Splunk app "Cortex XSOAR Analytics App for Splunk" This app requires three configuration items (XSOAR URL , XSOAR API Key, and Splunk Token).I'm not sure where to obtai... by wdeherre1 New Member in All Apps and Add-ons Thursday 0 1	0	1
SSL certificate Hello Splunkers!!I have a VM server with two IP addresses: one NAT IP and one public IP. I have installed an SSL cert... by LogUx Motivator in Splunk Enterprise Thursday 0 1	0	1
Splunk Enterprise Operating System Upgrade Approach We are running Splunk Enterprise 10.2.3 on prem on Windows 2016 as followsSystemOSRolesVirtualCommentsServerAWindows ... by shocko Contributor in Splunk Enterprise Thursday 0 3	0	3
Recap \| Agentic Operations Start with Context: Build the Right Data Foundation Agentic Operations Start with Context: Build the Right Data Foundation By Courtney Wright, Product Marketing Manage... by LesediK Splunk Employee in Webinars Wednesday 0 0	0	0
Recap \| Assisted, Augmented or Agentic? Choose Your Splunk Starting Point Assisted, Augmented or Agentic? Choose Your Splunk Starting Point By Courtney Wright, Product Marketing Manager, Sp... by LesediK Splunk Employee in Webinars Wednesday 0 0	0	0
Session 2 \| Beyond the Thread: Operationalizing AI with Confidence Session 2 Beyond the Thread: Operationalizing AI with Confidence The true power of the Cisco Data Fabric isn’t j... by LesediK Splunk Employee in Webinars Wednesday 0 0	0	0
Search Head Performance - Metadata scanning Using Splunk Enterprise 9.4.3 on Windows 2019. Our single search head is having some performance issues. Whilst searc... by shocko Contributor in Splunk Enterprise Wednesday 0 2	0	2
Session 1 \| Beyond the Thread: Deconstructing the Cisco Data Fabric Session 1 How to unify cross-domain intelligence and activate operations for the agentic era. Watch now the first... by LesediK Splunk Employee in Webinars Wednesday 1 0	1	0
SCMA 5.4.11 Uploading to Splunk as 5.2.1 Hello!I uploaded the newest version of SCMA to our Splunk Environment. Currently it is uploaded as 5.2.1 which is str... by ggvaca Path Finder in All Apps and Add-ons Wednesday 0 0	0	0
Improve Delivery Assurance with S2S ACK for Edge Processor Edge Processor helps Splunk customers process data closer to the source: filtering, transforming, masking, and routin... by fjiang Splunk Employee in Product News & Announcements Wednesday 0 0	0	0
.conf26 Platform Sessions: Turn Machine Data into Agentic Action As autonomous agents and multi-cloud architectures reshape modern IT, data platforms have to do far more than just st... by bevsmart Splunk Employee in Community Blog Wednesday 0 0	0	0
Introducing the Launch of Edge Processor in Hybrid Mode! Modernize Data Ingestion Without Starting Over For years, organizations have relied on Splunk's proven forwarding in... by fjiang Splunk Employee in Product News & Announcements Wednesday 0 0	0	0

View More Posts

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards these events to Splunk. It serves as a replacement for the existing Kafka Connector ...

Splunk Employee

on Product News & Announcements 13 hours ago

2406

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It hangs on my wall: a live air-traffic radar scope and an analogue clock, rotating on a ...

SplunkTrust

on Community Blog Friday

369

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence is fundamentally changing how engineering teams build and operate modern digital ...

Community Manager

on Community Blog Friday

105

Splunk Technical Support Is Moving to Cisco Support Tools

Introduction Splunk technical support is transitioning to Cisco’s support environment. This change brings Splunk support cases into Cisco’s support ecosystem, laying out the foundation for future ...

Community Manager

on Community Blog Friday

699

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Scaling the Deployment Server (Old Way, new Way)

Different output search and where

High CPU Utilization Query not working

SMTP for exchange

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Seeking feedback on SIEM log integrity monitoring

Splunk AI Toolkit / Splunk_SA_Scientific_Python - challenging upgrade

Unable to get daily license consumption details

Best way to get support assistanace with the new Free Splunk Observability Cloud

Rounding off the Splunk Dashboard Contest

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

Data quality, track log formats changes

Splunk Technical Support Is Moving to Cisco Support Tools

question regard Splunk app "Cortex XSOAR Analytics App for Splunk"

SSL certificate

Splunk Enterprise Operating System Upgrade Approach

Recap | Agentic Operations Start with Context: Build the Right Data Foundation

Recap | Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Search Head Performance - Metadata scanning

Session 1 | Beyond the Thread: Deconstructing the Cisco Data Fabric

SCMA 5.4.11 Uploading to Splunk as 5.2.1

Improve Delivery Assurance with S2S ACK for Edge Processor

.conf26 Platform Sessions: Turn Machine Data into Agentic Action

Introducing the Launch of Edge Processor in Hybrid Mode!

Meet the SplunkTrust

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Rounding off the Splunk Dashboard Contest

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

Splunk Technical Support Is Moving to Cisco Support Tools

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources