Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant Splunk experts Clara and Cary, assisted by members of the Splunk Trust. We spent a couple of hours on Tuesday afternoon trying to solve problems using regular expressions to gain points. The problems were nominally rated as Beginner, Intermediate and Advanced, with bonus (hidden) strings so that more generalised solutions could gain extra points. Here's a statistical analysis of what happened!

Hello Splunkers,

And just like that, .conf25 is in the books! What an incredible few days — full of learning, networking, and community energy. For me personally, this was extra special. As someone who recently joined Splunk from the AppDynamics Community, it was my very first .conf. I finally got to meet so many of my coworkers face-to-face and connect with countless community members I’d only known online.

Our very first feature focuses on Mark McCullough — a familiar face to many in the community. His story is one of persistence, curiosity, and a deep passion for helping others succeed with Splunk.

Hello, Splunk Community! We are beyond thrilled to announce the 2025-2026 cohort of SplunkTrust members! 

Join us in the Community Zone at .conf to connect, play, and learn with one another! We'll be right near the Splunk Store and Theatre!

Qmulos combines innovative thinking with strong engineering to redefine cybersecurity compliance. With over 120+ TB of automated evidence collected and more than 700K security controls monitored, their Q-Compliance app takes Splunk to the next level for both public and private sector teams. In this fifth edition of our Spotlight series, meet the unique minds driving this transformation — and discover how they’re shaping the future of security.

You have gotten all the necessary approvals, the contract is signed, the instance is live, and you are staring at the Visual Playbook Editor wondering where to begin.  This is where we were a couple of months ago, allow me to guide you through what worked for us, some roadblocks and how we came through.

This short article shows how tokens and handlers can be used to modify how a dashboard operates, including replacing a chart that is waiting for a search to complete with a tailored HTML panel, changing the values used by CSS, and, controlling the order in which searches execute.

It's that time, folks! The application/nomination period for the 2025 SplunkTrust is officially open! APPLY to join the SplunkTrust or NOMINATE a fellow Splunk practitioner now!

Meet William—aka The Splunk Guy—whose path from building websites to engineering cloud-scale solutions is anything but ordinary. Starting in Web Development and evolving into a Cloud and Security Expert, William has transformed personal projects into impactful tools for the Splunk community. From pandemic response systems to CI/CD automation, discover how his hands-on approach, passion for DevOps, and love for tinkering (both with tech and sourdough) make him a standout in the world of Splunk.

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, this choice gets less thought, less consideration than any other detail in log onboarding. That's a mistake. Picking the right sourcetype often drives the right behavior throughout the log onboarding process.

Stay Ahead with the Latest from the Splunk App Dev Community!

Whether you're crafting new solutions, fine-tuning existing apps, or just beginning your developer journey, this roundup is packed with updates, expert insights, and growth opportunities to help you get even more out of the Splunk platform. In this roundup, we’re highlighting key updates—from expert-led sessions and hands-on SPL2 workshops to upcoming platform changes and a brand-new Developer Program. Let’s dive into what’s happening now and what’s coming next!

This is a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers creating a panel to show rates instead of counts for each status.

This is a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers creating an alternative way of comparing hourly rates with the previous few days.

Meet Brett: Splunker, innovator, and all-around tech enthusiast. From building apps that solve real-world problems to geeking out over video games and home automation, Brett’s journey is as dynamic as the data he works with. Discover what drives this SplunkTrust star in our latest Spotlight feature!

This is a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers creating another new panel which will drill-down to the events behind the charts. You can read previous posts on the Splunk Community Blog! 

This is a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers creating a new panel to show details based on the selection made by the user. You can read previous posts on the Splunk Community Blog! 

This is a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers using pan and zoom to select areas of the chart to focus on. You can read previous posts on the Splunk Community Blog! 

This is part 4 in a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

This section covers using the results of a search to modify the colours used in the panel titles.

This is part 3 in a series of blogs demonstrating how to build a dashboard for analysing the web logs from the Splunk Enterprise Search Tutorial dataset, and starts from where the tutorial left off.

In this section, you will modify the dashboard to visualize how the success rate compares to a desired threshold level, or Service Level Objective.

This is part 2 in a series of blogs from a member of the SplunkTrust, demonstrating how to build a dashboard for analyzing the web logs from the Splunk Enterprise Search Tutorial dataset. This series assumes you have already completed that tutorial, as it uses the same dataset that you will have already downloaded and ingested into Splunk. If you have not, please go to the Tutorial and complete it (or at least download and ingest the dataset).

This section covers creating a panel to show rates instead of counts for each status.

We are excited to kick off a new series of blogs from a member of the SplunkTrust, demonstrating how to build a dashboard for analyzing the web logs from the Splunk Enterprise Search Tutorial dataset. This series assumes you have already completed that tutorial, as it uses the same dataset that you will have already downloaded and ingested into Splunk. If you have not, please go to the Tutorial and complete it (or at least download and ingest the dataset).

What excites our customers and partners about Splunk? This is a question we are very curious about, so we brought it to the Splunk Love video booth at .conf24. 

(This is the second blog in our Splunk Love series. Check out our first one: "Describe Splunk in One Word"!)

The Splunk-based indexer workloads tested included around a million searches/day and ingestion of around 350GB data per indexer per day. The ext4 filesystem consistently outperformed XFS in terms of the introspection measure “avg_total_ms” on multiple indexer clusters.

We are beyond thrilled to announce our newest group of SplunkTrust members! The goal of the SplunkTrust™ program is not to recognize users in the room who know the most about Splunk. Rather, the SplunkTrust program was created to acknowledge and recognize those who go above and beyond to help their fellow Splunk practitioners and who have truly helped shape this wonderful, vibrant community.

A huge congrats to all new and returning members of the .conf23 SplunkTrust:

We love shining the spotlight on members of this incredible community! Come along as we chat with member Michael Uschmann — aka @MuS — and learn about where his life and career have taken him since we last checked in (in 2019!)

It's application season for the SplunkTrust(tm) and we love shining the spotlight on members of this incredible community! Come along as we chat with member Rich Mahlerwein — aka @Richfez — and learn about where his life and career have taken him since we last checked in (in 2017!)

In 2018, Splunk featured a video about SplunkTrust member Clara Merriman. We interviewed Clara for the Where Are They Now series of blog posts to share her career growth story with you. Read on to learn more about Clara since her video was released.