Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 5,242 Online 158K Posts

Ready to Level Up? Here Are 3 Ways AI Can Optimize Your Day.

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Watch on demand us for a demo-driven look at how Splunk supports this spectrum of agentic experiences. Start with AI Assistant ...

Splunk Employee

on Splunk Tech Talks 17m ago

177

The Data Connection - October 2026

We all have data. Lots of it. But that’s not the problem – it’s understanding what we should we do with it, where should it go, and how will anyone find it again. When data spans sources and ...

Splunk Employee

on Product News & Announcements 3 hours ago

Beyond the Acceleration Zone: Maximizing Your Success with Splunk Customer Experience Resources

Customer success is built on tailored guidance and accessible resources. As a Splunk user, you are encouraged to tap into our rich ecosystem of free tools, professional services, and community ...

Splunk Employee

on Community Blog 6 hours ago

Make your Splunk investment work harder with Optimization Advisor

Value Insights brings usage evidence and practical recommendations together to help customers make more informed decisions about data management and licensing. As organizations expand security, ...

Splunk Employee

on Product News & Announcements yesterday

118

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner Watch on demand us for a demo-driven look at ... by LesediK Splunk Employee in Splunk Tech Talks 17m ago 0 1	0	1
How to propagate a newly created index name to be listed on the HF apps? When we create a new index on the cloud, this index doesn't show up in the drop-downs on the various apps that are on... by ddrillic Ultra Champion in Getting Data In 40m ago 0 4	0	4
The Data Connection - October 2026 We all have data. Lots of it. But that’s not the problem – it’s understanding what we should we do with it, where sho... by MichelleCorpora Splunk Employee in Product News & Announcements 3 hours ago 0 0	0	0
Custom provider issue with AI toolkit Hello, getting error with AI toolkit and custom provider (litellm), anyone managed to make it work?splunk server 9.3.... by splunkreal Influencer in All Apps and Add-ons 5 hours ago 0 8	0	8
Beyond the Acceleration Zone: Maximizing Your Success with Splunk Customer Experience Resources Customer success is built on tailored guidance and accessible resources. As a Splunk user, you are encouraged to tap ... by bevsmart Splunk Employee in Community Blog 6 hours ago 0 0	0	0
Recommended upgrade path for Splunk Heavy Forwarders, DB Connect, and Java from older versions We have a distributed Splunk Enterprise environment where the search heads, indexers, and management servers are runn... by danielbb Motivator in Splunk Enterprise 6 hours ago 0 6	0	6
Forwarders not connecting to new on-prem Deployment Server Hi all,I'm trying to setup a new Splunk Enterprise deployment server. But my Splunk forwarders seem unable to connect... by eddieddieddie Path Finder in Getting Data In 7 hours ago 0 3	0	3
DB Connect CyberArk identity: how do I use a CCP endpoint other than /AIMWebService/ for client-certificate auth? Hi all,I'm setting up a CyberArk identity in Splunk DB Connect to fetch a database password from CyberArk CCP. It use... by Sierra New Member in All Apps and Add-ons yesterday 0 4	0	4
Edge Processor 1.12.4: “index out of range” panics and silent data loss after adding a stats branch to a pipeline Sharing an issue I hit while testing Edge Processor aggregation in my lab, in case it saves someone else time. I'd al... by thsngnr Engager in Getting Data In yesterday 1 3	1	3
Full-Stack Observability Office Hours: Ask the Experts Full-Stack Observability Office Hours: Ask the ExpertsOctober 22nd 2026 \| 11:00am – 12:00pm PT As AI reshapes appli... by Anam Community Manager in Community Office Hours yesterday 0 1	0	1
Make your Splunk investment work harder with Optimization Advisor Value Insights brings usage evidence and practical recommendations together to help customers make more informed deci... by kwheeler Splunk Employee in Product News & Announcements yesterday 0 0	0	0
Could you please make a more future-proof choice regarding your KVStore database and stick with it in a longer term? @splunkEnt. product management/development: Could you please make a more future-proof choice regarding your KVStore d... by apietersen Contributor in Splunk Enterprise yesterday 0 1	0	1
Disable SSL verification Hello,How do I disable SSL verification on the Invicti Platform add-on?Is this a replacement for the net sparker app ... by _joe Contributor in Getting Data In Tuesday 0 1	0	1
Ingesting all WIZ vulnerabilities I am trying to use this app to ingest vulnerabilities but it seems like I am getting rate-limited. Anyone else having... by _joe Contributor in Getting Data In Tuesday 0 3	0	3
Problem with splunk forwarder We're running Splunk Ent 9.4.15. We have a number of forwarders configured. All of them are working except one, which... by trile757 Engager in Getting Data In Tuesday 0 8	0	8
Proxy settings Hello, could you clarify where and how proxy settings should be in splunk-launch.conf or somewhere else? Also should ... by splunkreal Influencer in Splunk Enterprise Tuesday 0 4	0	4
How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26 At .conf26 in Denver, I spent much of my time in conversation with Splunk customers about Splunk AI Assistant. Those ... by AqibKazi Splunk Employee in Community Blog Tuesday 0 0	0	0
How to Secure Sensitive Data Before AI Processing? As organizations increasingly adopt AI tools for automation, analytics, and decision-making, protecting sensitive dat... by romquestaai_gma New Member in Deployment Architecture Tuesday 0 3	0	3
Federation 2.0: Explore the Latest Capabilities and Offerings [Watch on demand HERE]. This thread is for the Community Office Hours session on Federation 2.0: Explore the Latest C... by rederada Splunk Employee in Community Office Hours Tuesday 0 1	0	1
Splunk MCP Server not showing indexes in distributed search Hello,I've installed Splunk MCP Server in a distributed environment on a Search Head.When executing the get_indexes i... by Andre_ Communicator in All Apps and Add-ons Tuesday 0 11	0	11
SPLUNK ES 8.2.3 Drill Down not appearing I am facin big issue while creating use case on splunk and adding the drill down on the content management. I went to... by AbuNAM8 New Member in Splunk Search Tuesday 0 3	0	3
Using DV Ai assistant in Splunk search query Hello, great job, this app is great and working with custom endpoint!However is it possible to call it like \| ai dir... by splunkreal Influencer in All Apps and Add-ons Tuesday 0 1	0	1
Platform Office Hour \| AI Powered Data Management Data onboarding, schema mapping, and keeping pipelines healthy—is the manual grind slowing you down?  We’re all lo... by LesediK Splunk Employee in Community Office Hours Monday 0 0	0	0
Drill-down and Next Step are not read in Incident Review Hi There, I got issue Drill-down and Next Step are not read in Incident Review, i create Splunk Lab for Research And ... by zksvc Contributor in Splunk Enterprise Security Monday 0 5	0	5
Am I missing something, or is the Edge Processor restriction not clearly documented? / 500 Error starting: 1 The docs for the Data Management Control Plane / Edge Processor state that the service is not supported on a search h... by Crunchy New Member in Splunk Enterprise Sunday 0 1	0	1

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

How to propagate a newly created index name to be listed on the HF apps?

The Data Connection - October 2026

Custom provider issue with AI toolkit

Beyond the Acceleration Zone: Maximizing Your Success with Splunk Customer Experience Resources

Recommended upgrade path for Splunk Heavy Forwarders, DB Connect, and Java from older versions

Forwarders not connecting to new on-prem Deployment Server

DB Connect CyberArk identity: how do I use a CCP endpoint other than /AIMWebService/ for client-certificate auth?

Edge Processor 1.12.4: “index out of range” panics and silent data loss after adding a stats branch to a pipeline

Full-Stack Observability Office Hours: Ask the Experts

Make your Splunk investment work harder with Optimization Advisor

Could you please make a more future-proof choice regarding your KVStore database and stick with it in a longer term?

Disable SSL verification

Ingesting all WIZ vulnerabilities

Problem with splunk forwarder

Proxy settings

How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26

How to Secure Sensitive Data Before AI Processing?

Federation 2.0: Explore the Latest Capabilities and Offerings

Splunk MCP Server not showing indexes in distributed search

SPLUNK ES 8.2.3 Drill Down not appearing

Using DV Ai assistant in Splunk search query

Platform Office Hour | AI Powered Data Management

Drill-down and Next Step are not read in Incident Review

Am I missing something, or is the Edge Processor restriction not clearly documented? / 500 Error starting: 1

Meet the SplunkTrust

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

The Data Connection - October 2026

Beyond the Acceleration Zone: Maximizing Your Success with Splunk Customer Experience Resources

Make your Splunk investment work harder with Optimization Advisor

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources