Splunk Community

Find answers, ask questions, and connect with our community of consumers and specialists.

122K Members 6,151 Online 157K Posts

Start cracking a cybercriminal case using Splunk Enterprise Security Premier. Learn how it brings the right information together at the right moment to help you investigate smarter, respond faster, and win a $50 Cisco gift card.

Getting Started

Learn more about the Splunk Community and how we can help

Community Blog

Community happenings, product announcements, and Splunk news

Learning Paths

Discover Community and Learning Resources for your Role

User Groups

Meet up with other Splunk practitioners, virtually or in-person

Office Hours

Webinar-style deep dives and workshops for hands-on guidance

Community Activity

How to trigger detection of new files, folders, or edited Excel files in a directory monitored by Universal Forwarder? Hi community, I am using a Splunk Universal Forwarder (UF) to monitor a specific directory on our server. I need to a... by sonaralt New Member in Getting Data In 3 hours ago 0 1	0	1
k8s.pod.* and k8s.node.* metrics not appearing in Splunk Olly My Setup:- kubernetes (3 master, 10 worker) rocky linux 9.6- Splunk OTel Collector deployed via Helm chart- Agents ar... by kkunkel Engager in Splunk Observability Cloud 9 hours ago 0 0	0	0
KVStore stuck on starting on SH cluster with more than one member Hello everyone,Starting from version 10.2.0 and apparently all above, I have an issue concerning the KVStore. As indi... by MichelMichel New Member in Splunk Enterprise 11 hours ago 0 0	0	0
Splunk SOAR Run Query escaping double quotes in placeholder values Hi everyone,I'm facing an issue when executing a Splunk search through a Splunk SOAR playbook using the Run Query act... by AleCanzo Path Finder in Splunk Search 13 hours ago 0 2	0	2
Drill Down Search drilldown search in splunk notable is not capturing the original host which is mentioned in correlation search and ge... by kjain041523 New Member in Splunk Search yesterday 0 2	0	2
Does Dashboard Studio force time-like string to not be string type? I first notice that Dashboard Studio's input configuration UI sometimes treats a time string as "number"; as a result... by yuanliu SplunkTrust in Dashboards & Visualizations yesterday 0 2	0	2
How to Create a drill=down from a column chart Hello Again,I am using Splunk 9.4.12 on Oracle Linux 9. I want to use dashboard studio. Is dashboard studio preferred... by eholz1 Builder in Dashboards & Visualizations yesterday 0 13	0	13
What version of Splunk allows dashboard publish capabilityu? Hello Forum Members,It was my hope to publish a dashboard created in Splunk Dashboard Studio.I know this is possible ... by eholz1 Builder in Dashboards & Visualizations yesterday 0 5	0	5
Splunk MCP Server: Ask me Anything [Register HERE]. This thread is for the Community Office Hours session on Splunk MCP Server: Ask Me Anything on Thurs... by rederada Splunk Employee in Community Office Hours yesterday 0 0	0	0
Updated version of "Wiz Discovered VMs"? Hi. Looking for suggestions or for an updated version of the add-on https://splunkbase.splunk.com/app/7448We deploye... by staten Engager in All Apps and Add-ons yesterday 0 0	0	0
How to collect the debug-level InfraViz "Machine Agent" logs Why do I need to collect the debug-level startup logs? By default, the InfraViz 'Machine Agent' logs entries at the... by Lukasz_Kociuba Observer in AppDynamics Knowledge Base yesterday 0 0	0	0
Libcurl 8.20.0 bundled release for Splunk? Is there a scheduled or anticipated release for bundled libcurl 8.20.0 by Tolo Engager in Splunk Enterprise yesterday 0 3	0	3
Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights Building on the foundation established in our initial Value Insights releases, we are introducing the Savings categor... by RitikaSaini Splunk Employee in Product News & Announcements yesterday 0 0	0	0
When will the AI assistant for ES be available for OnPrem instances? Does anybody know when will the AI Agent for ES be available for OnPrem instances?Splunk said that it will be first a... by javier_oshiro Explorer in Splunk Enterprise Security yesterday 0 2	0	2
.NET Core async transaction: Exit Calls / Threads column empty in Function Trace Hi Team,I am testing a simple ASP.NET Core async application with AppDynamics .NET Agent.The agent is successfully de... by adhi New Member in Splunk AppDynamics Wednesday 0 1	0	1
10.2.4- Search Head unable to connect to Indexers After upgrading our distributed environment to 10.2.x (multi-site indexer cluster, RHEL 8), the Search Head suddenly ... by neelamsantosh Path Finder in Getting Data In Wednesday 3 1	3	1
TA_Guardium API Add-on for Splunk Hi All,I hope all is well.Kindly, anyone works with Guardium API Add-on for Splunk:https://splunkbase.splunk.com/app/... by 0xAli Path Finder in Getting Data In Wednesday 0 2	0	2
Hardware Monitoring: Best way to get PERC H710P metrics into Splunk? Hi everyone, I’ve been hanging around the Splunk community for a while, mostly dealing with application logs, but I’v... by licadiw273 New Member in Monitoring Splunk Wednesday 0 1	0	1
Search Head Performance - Metadata scanning Using Splunk Enterprise 9.4.3 on Windows 2019. Our single search head is having some performance issues. Whilst searc... by shocko Contributor in Splunk Enterprise Wednesday 0 1	0	1
Unable to Fetch Power Automate Flow Run and Flow Action Details – Spex Add-on for Microsoft M365 Automation Hi,I am currently using the Spex Add-on for Microsoft M365 Automation in Splunk.I have completed the setup and grante... by Spexuser New Member in Splunk AppDynamics Wednesday 0 1	0	1
Splunk Add on for AppDynamics Hi Teamwe are trying to use splunk add-on for appdynamics Cisco Splunk Add-on for AppDynamics \| SplunkbaseBut facing ... by kedar_bhusanikr New Member in All Apps and Add-ons Wednesday 0 1	0	1
JMX tabular data Some JMX MBean operations take a parameter of type javax.management.openmbean.TabularData. How can I provide that in... by JohnGregg Path Finder in Splunk AppDynamics Wednesday 0 1	0	1
How to implement a custom OpenTelemetry integration for ACU COBOL software? Hi, we are trying to implement a custom OpenTelemetry integration for ACU COBOL software.We want to sent traces and m... by javier_oshiro Explorer in Splunk Observability Cloud Wednesday 0 1	0	1
Enterprise Security 8.5.1 Team Queue are is blank in a cluster After upgrading ESS from 8.2.x to 8.5.1 the teams queue is blank. It just shows "Queues" and the rest is empty.New te... by dspencer Path Finder in Splunk Enterprise Security Wednesday 0 1	0	1
Configured Detections Have Disappeared from All Automation Rules HelloI'm experiencing an issue with Automation Rules in Splunk Enterprise Security (8.5.1). Sometimes I'm able to add... by shenglc New Member in Splunk Enterprise Security Wednesday 0 1	0	1

View More Posts

Meet the SplunkTrust

"Being a member of SplunkTrust as well as a User Group Leader enriches my knowledge of Splunk greatly. I am exposed to and learn so much about Splunk that I can be on top of any new features well ahead of the game." - Becky Burwell

The SplunkTrust is comprised of our most dedicated community members. They assist other members, participate in events, demonstrate the power of Splunk's products, and help guide future roadmaps.

Learn more

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings category in the Value Insights dashboard. This new feature empowers you to quantify ...

Splunk Employee

on Product News & Announcements yesterday

152

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As observability data volumes continue to surge, managing metric storage efficiently has become a ...

Community Manager

on Community Blog Monday

296

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud Playground

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with half the features locked, start the clock. By the time you've stood up a real ...

Splunk Employee

on Community Blog a week ago

2798

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a foundational element of your architecture. Today, we are thrilled to announce the launch of our ...

Splunk Employee

on Product News & Announcements a week ago

2003

Getting Started

Community Blog

Learning Paths

User Groups

Office Hours

How to trigger detection of new files, folders, or edited Excel files in a directory monitored by Universal Forwarder?

k8s.pod.* and k8s.node.* metrics not appearing in Splunk Olly

KVStore stuck on starting on SH cluster with more than one member

Splunk SOAR Run Query escaping double quotes in placeholder values

Drill Down Search

Does Dashboard Studio force time-like string to not be string type?

How to Create a drill=down from a column chart

What version of Splunk allows dashboard publish capabilityu?

Splunk MCP Server: Ask me Anything

Updated version of "Wiz Discovered VMs"?

How to collect the debug-level InfraViz "Machine Agent" logs

Libcurl 8.20.0 bundled release for Splunk?

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

When will the AI assistant for ES be available for OnPrem instances?

.NET Core async transaction: Exit Calls / Threads column empty in Function Trace

10.2.4- Search Head unable to connect to Indexers

TA_Guardium API Add-on for Splunk

Hardware Monitoring: Best way to get PERC H710P metrics into Splunk?

Search Head Performance - Metadata scanning

Unable to Fetch Power Automate Flow Run and Flow Action Details – Spex Add-on for Microsoft M365 Automation

Splunk Add on for AppDynamics

JMX tabular data

How to implement a custom OpenTelemetry integration for ACU COBOL software?

Enterprise Security 8.5.1 Team Queue are is blank in a cluster

Configured Detections Have Disappeared from All Automation Rules

Meet the SplunkTrust

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Event Series: Telemetry Pipeline Management

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud Playground

Deep insights, no barriers: Splunk Observability Cloud Free Edition

Additional Help & Resources

Community Guidelines

Community Slack Workspace

Splunk Documentation

Join the Conversation

Additional Help & Resources

Meet the SplunkTrust

Additional Help & Resources