Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 2,188 Online 158K Posts

Join us for a 4-part series on Splunk Agent Observability consisting of Webinar, Tech Talk, Workshop, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of monitoring are shifting. Today, the challenge isn't just knowing if a service is online, it is ...

Community Manager

on Community Blog yesterday

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards these events to Splunk. It serves as a replacement for the existing Kafka Connector ...

Splunk Employee

on Product News & Announcements Tuesday

2619

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to mastering the latest Splunk Enterprise Security innovations. Join us to move from theory to ...

Splunk Employee

on Community Blog Monday

111

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and on-premises customers who have upgraded to version 10.4. This transformative update shifts ...

Splunk Employee

on Product News & Announcements Sunday

5121

account has been locked out. For security reasons, your account has been locked out. Please try again later or contact your system administrator. by balu25 New Member in Training + Certification Discussions yesterday 0 1	0	1
Upgrades to 9.4.15, 10.0.10, 10.2.7 and 10.4.3 fail on CIS-hardened systems (noexec on /var/tmp) Hi all,when upgrading to Splunk Enterprise 9.4.15, 10.0.10, 10.2.7 or 10.4.3 with the .rpm or .deb package, the upgra... by schose Builder in Splunk Enterprise yesterday 0 0	0	0
Multi-Layer Deployment Server: Backend Functional, GUI Error on Main DS I configured a multi-layer Deployment Server (DS) setup with the following architecture:Main DS Management: The main ... by Wohamed_wakkad Path Finder in Deployment Architecture yesterday 0 2	0	2
A Four-Part Event Series: Full Stack Observability For the AI Era As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of monitoring are ... by Anam Community Manager in Community Blog yesterday 0 0	0	0
Install AppDynamics in the context of an alpine container for a PHP application My goal is to run AppDynamics in the context of a PHP application using an Alpine container. I am using the official ... by fab1en Observer in Splunk AppDynamics Wednesday 0 7	0	7
STIG Compliance App for Splunk With the "STIG Compliance App for Splunk" installed, any checklist drag and dropped or browsed-for and installed just... by richnokes New Member in Splunk Enterprise Wednesday 0 1	0	1
Agent Management intermittently unavailable on 10.2.7 (RHEL 8) Environment:- Splunk Enterprise 10.2.7, incrementally upgraded from an older 10.x line- RHEL 8 & Windows Server 2022 ... by BenjaminFinck Explorer in Splunk Enterprise Wednesday 0 2	0	2
Dashboard Studio Dropdown Input Missing Results I have a search to retrieve possible dropdown results from a search. The search produces 546 results. Going through t... by rogilic New Member in Dashboards & Visualizations Wednesday 0 1	0	1
Splunk Integration for Crypto Object Discovery Hello Team,I am working on a requirement to discover cryptographic objects using Splunk. I need to collect relevant l... by Priyanka8440 New Member in Getting Data In Wednesday 0 4	0	4
Is there a way to calculate Age by Date (Older than 50 years)? I am trying to calculate birth year and age, based on birthdate. The following works, but only for dates within the l... by peining Observer in Other Usage Tuesday 0 4	0	4
Splunk Cloud trial/free account detects multiple failed login attempts and locks the account. Urgently need help to unlock the account please assist ASAP Thanks Wait 15-30 minutes and tried still same and accoun... by balu25 New Member in Splunk Cloud Platform Tuesday 0 1	0	1
I only want this query to alert when there is 5 consecutive minutes or more of high cpu utilization I have a splunk SPL query that works when there is a high cpu utilization.index=linux\| rex field=_raw "(?<pctUser>[0-... by hotrodbass Explorer in All Apps and Add-ons Tuesday 0 6	0	6
Custom object store for on-prem edge? Hi,I was excited to see edge processor has been made available in Splunk enterprise on-prem - this will be super hand... by garethhumphrgkc Engager in Splunk Enterprise Tuesday 0 3	0	3
Office Hours: Getting More from ES Essentials and Planning Your Next Step AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to mastering... by mbonfiglio Splunk Employee in Community Office Hours Tuesday 0 0	0	0
SOC4Kafka - New Kafka Connector Powered by OpenTelemetry The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards these even... by pszkamruk Splunk Employee in Product News & Announcements Tuesday 2 2	2	2
Seeking feedback on SIEM log integrity monitoring Hello, I am a cybersecurity engineering student and I am currently in the final stage of an international cybersecuri... by feridmehtiyev1 Engager in Splunk Enterprise Security Tuesday 1 10	1	10
The splunkd daemon cannot be reached by splunkweb Hello, since we upgraded to the version 10.4.3.0 we have encountered the problem that randomly after the login we hit... by splunkg Explorer in Splunk Enterprise Monday 0 1	0	1
How to identify all outbound IP addresses and endpoints required by Splunk Search Head? Hello Splunk Community,I have a Splunk Enterprise environment where the Search Head has restricted Internet access. A... by luispulido Explorer in Splunk Enterprise Monday 0 0	0	0
Just recently getting error with bundlefiles custom command Not sure when bundlefiles command stopped working, but it might have been when upgraded to latest Little Admins Helpe... by wryanthomas Contributor in Splunk Cloud Platform Monday 0 3	0	3
InfraViz SSL Certificate Issue for On-Premises Controllers: What Should Be Checked? Step-by-Step Guide to Verifying SSL Certificates Using AppDynamics InfraVizIn this article, you will learn how to ver... by Lukasz_Kociuba Loves-to-Learn in AppDynamics Knowledge Base Monday 0 0	0	0
ES Mission control auto refresh We are setting up Mission Control as the main dashboard in our operations center (which handles both NOC and SOC sinc... by AvocadoLogs Engager in Splunk Enterprise Security Monday 1 2	1	2
Event Series: Level up your SOC: Advancing with Splunk Enterprise Security AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to mastering... by mbonfiglio Splunk Employee in Community Blog Monday 0 0	0	0
Time format in props with INDEXED_EXTRACTIONS = csv Below is our csv log sample, and so far the following is working for us at the UF level - INDEXED_EXTRACTIONS = csv F... by ddrillic Ultra Champion in Getting Data In Monday 0 5	0	5
How do I get the cumulative percentage in Splunk Hello I am trying to get a cumulative percentage and have been unsuccessful with it. The data is below. so the equa... by theouhuios Motivator in Splunk Search Monday 0 8	0	8
Announcing Modern Navigation: A New Era of Splunk User Experience We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and on-prem... by PreranaD Splunk Employee in Product News & Announcements Sunday 0 15	0	15

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

account has been locked out.

Upgrades to 9.4.15, 10.0.10, 10.2.7 and 10.4.3 fail on CIS-hardened systems (noexec on /var/tmp)

Multi-Layer Deployment Server: Backend Functional, GUI Error on Main DS

A Four-Part Event Series: Full Stack Observability For the AI Era

Install AppDynamics in the context of an alpine container for a PHP application

STIG Compliance App for Splunk

Agent Management intermittently unavailable on 10.2.7 (RHEL 8)

Dashboard Studio Dropdown Input Missing Results

Splunk Integration for Crypto Object Discovery

Is there a way to calculate Age by Date (Older than 50 years)?

Splunk Cloud trial/free account detects multiple failed login attempts and locks the account.

I only want this query to alert when there is 5 consecutive minutes or more of high cpu utilization

Custom object store for on-prem edge?

Office Hours: Getting More from ES Essentials and Planning Your Next Step

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Seeking feedback on SIEM log integrity monitoring

The splunkd daemon cannot be reached by splunkweb

How to identify all outbound IP addresses and endpoints required by Splunk Search Head?

Just recently getting error with bundlefiles custom command

InfraViz SSL Certificate Issue for On-Premises Controllers: What Should Be Checked?

ES Mission control auto refresh

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Time format in props with INDEXED_EXTRACTIONS = csv

How do I get the cumulative percentage in Splunk

Announcing Modern Navigation: A New Era of Splunk User Experience

Meet the SplunkTrust

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources