Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

123K Members 2,697 Online 158K Posts

Join us for a 4-part series on Full-Stack Observability: For the AI Era consisting of a Webinar, Tech Talk, interactive Lab, and Office Hours

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents. Thursday, November 12, 2026 | 11AM PST / 2PM EST Register In this Tech Talk, Splunk platform specialists walk through Cisco Data Fabric, powered by ...

Splunk Employee

on Splunk Tech Talks yesterday

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. The key point is that asynchronous forwarding became possible because the behavior behind ...

Splunk Employee

on Community Blog yesterday

493

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in Barcelona, and the app returns a long, padded response with extra details and suggestions ...

Splunk Employee

on Community Blog yesterday

Deep Dive: The Agentic SOC in Action with Enterprise Security Agents

Takeaways: Splunk Enterprise Security brings Agentic SOC capabilities into the analyst workflow. Agents handle repeatable triage, investigation, and response tasks so analysts can review evidence ...

Splunk Employee

on Community Blog yesterday

Splunk MCP Server not showing indexes in distributed search Hello,I've installed Splunk MCP Server in a distributed environment on a Search Head.When executing the get_indexes i... by Andre_ Communicator in All Apps and Add-ons 4 hours ago 0 2	0	2
is it possible to customise the tool tip? is it possible to customise the tool tip? We consider using this as a "Change Calendar" and would need some event spe... by Andre_ Communicator in Dashboards & Visualizations yesterday 0 2	0	2
Add icon to Modern UI navigation bar? Hey there, in the new modern UI, is there any way to use custom icons in the navigation bar? That is, other than the... by BradOH Path Finder in Splunk Enterprise yesterday 0 1	0	1
Microsoft Teams Add-on for Splunk - Some call records missing I have been using the addon for several months now and it works fine in general however I do find when getting into d... by AH123123 New Member in All Apps and Add-ons yesterday 0 3	0	3
Make Your Machine Data AI-Ready in Splunk Every team is getting ready for AI agents. Thursday, November 12, 2026 \| 11AM PST / 2PM EST Register In this... by LesediK Splunk Employee in Splunk Tech Talks yesterday 0 0	0	0
Splunk Asynchronous Forwarding Explained Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. The ke... by hrawat Splunk Employee in Community Blog yesterday 2 1	2	1
Problem with splunk forwarder We're running Splunk Ent 9.4.15. We have a number of forwarders configured. All of them are working except one, which... by trile757 Observer in Getting Data In yesterday 0 6	0	6
What sourcetypes or sources aren't being searched Is there a way to determine what sources and/or sourcetypes AREN'T being searched? If data is coming into Splunk and... by rmorlen Splunk Employee in Getting Data In yesterday 2 12	2	12
How to Enable SPL2 in Splunk Enterprise 10.2 Hello,I recently upgraded my Splunk Enterprise environment from version 9.4.14 to 10.2.8, and I would like to know ho... by luispulido Explorer in Splunk Enterprise yesterday 0 3	0	3
AI Toolkit without internet - how to stop it trying to fetch remote model cost map from online? Hello,I am setting up the AI Toolkit in an air gapped environment with local LLM.The issue I am running in to is that... by Andre_ Communicator in Splunk Enterprise yesterday 0 1	0	1
How to Monitor AI Agents with Splunk Agent Observability Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in Barcelon... by CaitlinHalla Splunk Employee in Community Blog yesterday 0 0	0	0
Deep Dive: The Agentic SOC in Action with Enterprise Security Agents Takeaways: Splunk Enterprise Security brings Agentic SOC capabilities into the analyst workflow. Agents handle repeat... by loriexi Splunk Employee in Community Blog yesterday 0 0	0	0
New Member Introduction – Excited to Join the Splunk Community Hello everyone,I’m happy to be part of the Splunk Community. As a new member, I look forward to learning from experie... by dotmirror Engager in Training + Certification Discussions yesterday 0 0	0	0
no instance is running in bots.splunk.com apthunting.splunk.show not able to access any instances mentioned in bots.splunk.com by evalkrishdee New Member in Splunk Enterprise Security Wednesday 0 0	0	0
Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps) Running Splunk Ent. on windows server-2019. Just upgraded to Splunk Ent. 10.6.1.1. Used a CLI cmd below for upgrading... by apietersen Contributor in Splunk Enterprise Wednesday 0 3	0	3
[Puzzles] Solve, Learn, Reuse: Word-play This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle input was... by ITWhisperer SplunkTrust in Community Blog Wednesday 0 0	0	0
Upgrade Splunk Enterprise to 10.6.1.1 - KVStore migration failed Hi AllThe KVStore migration failed after upgrading Splunk Enterprise (Standalone, Windows Server 2022) from 10.4.3 to... by fakeplastic Engager in Splunk Enterprise Wednesday 0 1	0	1
Eventgen not distributing to indexer via HEC or S2S Performed a complete removal and reinstall of SA-Eventgen. Created a minimal configuration using a single sample file... by ASGrover Loves-to-Learn Lots in All Apps and Add-ons Wednesday 0 2	0	2
How to propagate a newly created index name to be listed on the HF apps? When we create a new index on the cloud, this index doesn't show up in the drop-downs on the various apps that are on... by ddrillic Ultra Champion in Getting Data In Tuesday 0 3	0	3
Issues after upgrade to 10.6.0.5 Hi all,after upgrading Splunk Enterprise from 10.4.3 to 10.6.0.5 there are some issues:Management of apps isn't worki... by TheExpert Path Finder in Splunk Enterprise Tuesday 0 7	0	7
How to ping 1678 host with ping command? How can i ping 1678 host with ping command \| inputlookup host.csv\| map search="search [\|ping host=$host$] " maxsear... by chimell1 Explorer in Dashboards & Visualizations Tuesday 0 5	0	5
Automating Splunk query results I would like to use AI tool to automate the Splunk search capability. For instance, instead of using Splunk search us... by senmng New Member in Dashboards & Visualizations Tuesday 0 3	0	3
Hourly Test Hello all, I am very new to Splunk so apologies if this is an easy one. We want to set up an alert to come out of Spl... by Matt_Splunk Loves-to-Learn in Splunk Search Tuesday 0 6	0	6
Ingesting all WIZ vulnerabilities I am trying to use this app to ingest vulnerabilities but it seems like I am getting rate-limited. Anyone else having... by _joe Contributor in Getting Data In Tuesday 0 0	0	0
Searching IP records by country basic search: index="nginx-loadbalancer" source=webserver.logs status=200 \| iplocation allfields=true clientip gives ... by cisaksen Explorer in Splunk Search Tuesday 0 1	0	1

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

Splunk MCP Server not showing indexes in distributed search

is it possible to customise the tool tip?

Add icon to Modern UI navigation bar?

Microsoft Teams Add-on for Splunk - Some call records missing

Make Your Machine Data AI-Ready in Splunk

Splunk Asynchronous Forwarding Explained

Problem with splunk forwarder

What sourcetypes or sources aren't being searched

How to Enable SPL2 in Splunk Enterprise 10.2

AI Toolkit without internet - how to stop it trying to fetch remote model cost map from online?

How to Monitor AI Agents with Splunk Agent Observability

Deep Dive: The Agentic SOC in Action with Enterprise Security Agents

New Member Introduction – Excited to Join the Splunk Community

no instance is running in bots.splunk.com

Upgraded Splunk Ent 10.6.1.1 --- "page-not-found" / Oops 404 error when clicking on Manage App (find other apps)

[Puzzles] Solve, Learn, Reuse: Word-play

Upgrade Splunk Enterprise to 10.6.1.1 - KVStore migration failed

Eventgen not distributing to indexer via HEC or S2S

How to propagate a newly created index name to be listed on the HF apps?

Issues after upgrade to 10.6.0.5

How to ping 1678 host with ping command?

Automating Splunk query results

Hourly Test

Ingesting all WIZ vulnerabilities

Searching IP records by country

Meet the SplunkTrust

Make Your Machine Data AI-Ready in Splunk

Splunk Asynchronous Forwarding Explained

How to Monitor AI Agents with Splunk Agent Observability

Deep Dive: The Agentic SOC in Action with Enterprise Security Agents

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources