Community Office Hours

Tuesday, March 18, 2025

Register here. This thread is for the Community Office Hours session on Debugging Microservices with Splunk Observability Cloud on Tues, March 18, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How do I detect issues with microservices and address them quickly? How do features like Service Centric Views, Tag Spotlight, and Trace Analyzer accelerate the troubleshooting process? How do Observability Cloud and Splunk Cloud/Enterprise work together to enhance troubleshooting capabilities? Anything else you'd like to learn about! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Looking forward to connecting!

0 attendees

0

Wednesday, March 19, 2025

[Register Here] This thread is for the Community Office Hours session on Security: Cisco Talos Integration on Wed, March 19, 2025 at 1pm PT / 4pm ET. This is your opportunity to ask questions about Cisco Talos integration with Splunk Security. Our experts are ready to answer all your questions, such as: What can I ask in this AMA? How does Cisco Talos threat intelligence integrate with Splunk Security products? What kinds of intelligence are provided by the Cisco Talos integrations? How do I start using Cisco Talos intelligence in my Splunk Security products? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, March 20, 2025

Register Here. This thread is for the Community Office Hours session on Splunk AI: Ask me Anything on Thurs, March 20, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How does Splunk use generative AI? What are some common use cases to get started with the Machine Learning Toolkit (MLTK) app? How can Splunk help me monitor and secure my generative AI applications? How do the Splunk AI Assistants keep customer data confidential? How can I leverage ML for anomaly detection? Can I develop and package a custom machine learning model in Splunk? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Tuesday, April 15, 2025

Register here. This thread is for the Community Office Hours session on AI Assistant in Observability Cloud on Tues, April 15, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How can I use the AI Assistant to: Speed up investigations w/ faster root cause analysis and guided troubleshooting? Easily uncover key insights and make more informed decisions? Lower the learning curve for you and your team with Splunk Observability Cloud? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, April 17, 2025

Register here. This thread for the Community Office Hours session on Future Proofing your Splunk Apps: OpenSSL3 and More on Thur, Apr 17, 2025 at 1pm PT. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? Why is Splunk transitioning to Open SSL version 3 and when? Which customers will be impacted by the OpenSSL3 upgrade? How can I prepare my Splunk environment and applications for Open SSL3? What tools are dependent on OpenSSL3? What benefits will I get with the FIPS-140-3 certified OpenSSL3 library? What will happen if my app or client using SSL 3.0, TLS 1.0, TLS 1.1 tries to establish a connection with Splunk running OpenSSL3? What will happen to my apps if we ship OpenSSL3, but some apps use TLS 1.0 or 1.1? Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, April 24, 2025

[Register Here ] This thread is for the Community Office Hours session on Security: SOAR on Thur, April 24, 2025 at 1pm PT / 4pm ET. (It is the updated schedule for our event~) This is your opportunity to ask questions related to your specific Splunk SOAR product, and use cases, including: What are the latest features of SOAR that I should know about? How do Splunk SOAR Playbooks and Actions integrate with Splunk Enterprise Security? How can I leverage the Automation Rules feature to assign playbooks to detections and automate the process? What are the best practices for developing playbooks, workbooks, and process workflows? How do I implement Guided Automation to further optimize the playbook-building process? What are the best practices for setting up prompts in SOAR? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

2

Tuesday, May 20, 2025

Watch On-Demand. This thread is for the Community Office Hours session on Data Management in Observability Cloud on Tues, May 20, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - What capabilities does Splunk have to balance costs and data volume? - How does the Splunk Distribution of the OpenTelemetry Collector help filter out data to reduce ingestion costs? - What are some ways that I can scale confidently without breaking the bank? - How can I filter, aggregate, and archive data for optimal storage and analytics? - Anything else you'd like to learn about! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Thursday, May 22, 2025

Register here (watch on demand). This thread is for the Community Office Hours session on Splunk + Cisco Integrations on Thurs, May 22, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What Splunk and Cisco integrations are available today? What tools/TAs can I use to integrate my Splunk and Cisco data? How can we ingest ASA, IOS, Meraki, or ThousandEyes data? How can I view and analyze incidents within Splunk ES using Cisco XDR as a data source? How do AppDynamics and Splunk Observability Cloud work together? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Tuesday, June 17, 2025

Watch On-Demand. This thread is for the Community Office Hours session on Splunk Infrastructure Monitoring on Tues, June 17, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - What are some enhancements to the Kubernetes Monitoring experience in Splunk IM? - How do I use and customize Kubernetes navigators? - What are best practices for optimizing Kubernetes alerts and troubleshooting workflows? - Is there a way to view Kubernetes logs correlated with metrics? - What are some top services that I should be monitoring? - Anything else you'd like to learn about! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, June 18, 2025

Register/Watch OnDemand here. This thread is for the Community Office Hours session on Platform: Federated Data Management on Wed, June 18, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How do Data Management, Federated Search, and Federated Analytics work together? Can I get a demo? How can I optimize my data design according to its use case (detection, investigation, threat hunting, compliance, etc.)? How does Splunk enable data federation across Amazon Security Lake and S3? What tools are available to me? How can I onboard data from any data store or end points? How can I start filtering and routing data with Edge Processor or Ingest Processor? How can I optimize my Edge Processor or Ingest Processor pipelines? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Tuesday, July 15, 2025

Watch On-Demand. This thread is for the Community Office Hours session on Splunk IT Service Intelligence (ITSI) on Tues, July 15, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - How can I use ITSI to analyze IT service health? - What are some tips to reduce alert noise? - How can I isolate and prioritize actionable events? - What kinds of Executive Dashboards can I build to visualize the health of the business? - Anything else you’d like to learn! We look forward to seeing you there! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, July 16, 2025

[Register Here] This thread is for the Community Office Hours session on Data Management in Security on Wed, July 16, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the best practices for managing and optimizing security data ingestion in Splunk? How can I improve the efficiency of my security data pipelines? How do I properly map security logs to the Common Information Model (CIM)? How to ensure accuracy and consistency with large volumes of data across multiple security log sources? How should I structure my security data for faster investigations and threat hunting? What role does AI/ML play in managing and analyzing security data in Splunk? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Tuesday, August 19, 2025

Watch On Demand here. This thread is for the Community Office Hours session on Platform: Splunk Search on Tues, August 19, 2025 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How can I optimize this search query so it runs faster? How do I translate my question into SPL? What are common use cases/prompts for the AI Assistant for SPL? How do I set up federated search for Amazon S3? How do I convert my SPL into SPL2? How do I create an alert/visualization/dashboard from my search? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Wednesday, August 20, 2025

[Register here] This thread is for the Community Office Hours session on Security: Enterprise Security on Wed, Aug 20, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the latest updates in Splunk Enterprise Security? How can I implement Risk-based alerting (RBA)? How can I utilize Threat Intelligence Management and Cisco Talos for better context? How do I access the latest out-of-the box detections? Which Splunkbase apps and add-ons are recommended for Splunk Enterprise Security use cases? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, August 21, 2025

Register here. This thread is for the Community Office Hours session on Observability: Splunk AppDynamics on Thu., August 21, 2025 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - What are the latest updates in AppDynamics? - How can I use AppDynamics Business iQ to monitor critical business metrics? - How can I deploy AppDynamics Agents in different settings? - How can I use AppDynamics Secure Application to ensure applications are secure and high-performing? - What are best practices for crafting AppDynamics Query Language (ADQL) queries? - Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Thursday, October 2, 2025

Watch On Demand. This thread is for the Community Office Hours session on Splunk 10.0: Your Guide to a Smooth Upgrade Journey on Thurs, Oct 02, 2025 at 1pm PT / 4pm ET. Join us for a first look at the next evolution of Splunk Enterprise and Splunk Cloud Platform, Splunk 10, featuring powerful new capabilities to enhance data security, simplify operations, and ensure compliance readiness. This interactive Office Hour will not only highlight key updates designed to future-proof your Splunk environment but also provide a space to address your upgrade readiness questions in real time, with Splunk experts on hand to assist. What can I ask in this AMA about the next Splunk upgrade? What is included in Splunk 10? What are the key innovations in Splunk 10 that customers should know about? What is the benefit of upgrading to Splunk 10? How can I upgrade to Splunk 10 and what is inclusive of upgrade readiness? How can I use the Splunk Health Assistant Add-on? (address EOL Upgrade Readiness App) SCP vs Splunk Enterprise Upgrade Readiness What are the breaking changes customers need to be aware of and action on? Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Thursday, October 23, 2025

Watch on demand. This thread is for the Community Office Hours session on Platform: Splunk Cloud Migration on Thurs, October 23, 2025 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the primary benefits realized from moving to the Splunk Cloud Platform? What are the essential steps to prepare an on-prem Splunk environment for cloud migration? What are the key approaches and considerations for a successful cloud migration? How can users optimize performance and manage costs effectively in Splunk Cloud? What are the key management differences between an on-prem and SaaS-deployed environment of Splunk? What are the different migration engagement models (i.e. self-service, partner-led, services-led)? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Tuesday, November 18, 2025

[Register Here] This thread is for the Community Office Hours session on Splunk Enterprise Security - the AI Powered SecOps Platform on Tuesday, Nov 18, 2025 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is different in the latest Splunk Enterprise Security, the AI powered SecOps Platform? Why upgrade to Enterprise Security 8 and why now? What are upgrade considerations and prep work? What do I need to know as a SOC Analyst, Detection Engineer, or SOAR engineer before and after my upgrade to Enterprise Security 8? What is the difference between Enterprise Security Essentials and Enterprise Security Premier? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, November 19, 2025

Register here. This thread is for the Community Office Hours session on Splunk ITSI on Wednesday, November 19, 2025 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA about ITSI? How can I incorporate ITSI's AI-powered features like EventIQ to help reduce alert noise? What kinds of Executive Dashboards can I build to visualize the health of the business? How can I respond to issues faster with features like Episode Summarization? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Thursday, November 20, 2025

Register here. This thread is for the Community Office Hours session on Platform: Data Management & Federation on Thurs, November 20, 2025 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How do Edge Processor/Ingest Processor and Federated Search for Amazon S3 work together? Can I get a demo? How can I configure Edge Processor in Splunk Enterprise (on-prem)? How can I onboard data from any data store or end points? How does Splunk enable data federation across Amazon Security Lake (ASL) and S3? What tools are available to me? How can I optimize my Edge Processor or Ingest Processor SPL2 pipelines? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Tuesday, December 2, 2025

[Register here] This thread for the Community Office Hours session on Splunk 10.0 Is Here: Your Guide to a Smooth Upgrade Journey_EMEA on Tue, Dec 02, 2025 at 4pm CEST (Central European Summer Time) / 7am PT. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is included in Splunk 10? What are the key innovations in Splunk 10 that customers should know about? What is the benefit of upgrading to Splunk 10? How can I upgrade to Splunk 10 and what is inclusive of upgrade readiness? How can I use the Splunk Health Assistant Add-on? (address EOL Upgrade Readiness App) SCP vs Splunk Enterprise Upgrade Readiness What are the breaking changes customers need to be aware of and action on? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Thursday, December 4, 2025

[Register here] This thread for the Community Office Hours session on Splunk 10.0 Is Here: Your Guide to a Smooth Upgrade Journey_APJC on Fri, Dec 05, 2025 at 9am JST (Japan Standard Time) / Thur, Dec 04, 2025 at 4pm PT / . Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is included in Splunk 10? What are the key innovations in Splunk 10 that customers should know about? What is the benefit of upgrading to Splunk 10? How can I upgrade to Splunk 10 and what is inclusive of upgrade readiness? How can I use the Splunk Health Assistant Add-on? (address EOL Upgrade Readiness App) SCP vs Splunk Enterprise Upgrade Readiness What are the breaking changes customers need to be aware of and action on? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Tuesday, December 9, 2025

Register here. This thread is for the Community Office Hours session on Splunk Observability Cloud - Synthetic and Real User Monitoring (RUM) on Tuesday, Dec 9, 2025 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk products and use case topics. In this session, we will focus on Digital Experience Monitoring, specifically Real User Monitoring (RUM) and Synthetic Monitoring. Bring your questions and get direct insights from the team. What can I ask in this AMA? How do I get a more complete view of the user experience on my app or website? How do I correlate front and backend investigations? Can you give me tips on proactively finding and fixing performance issues? How can I gain insights into user engagement and behavior? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, December 10, 2025

[Register Here] This thread is for the Community Office Hours session on Security: Splunk SOAR on Wednesday, Dec 10, 2025 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What’s new in the latest Splunk SOAR? Should I upgrade to this version, and what’s the easiest way to make the upgrade happen? How does the Splunk Attack Analyzer integration work? And how can playbooks be implemented to automate response processes for the malware and phishing attack? What are the practical ways to modernize legacy SOC workflows with Splunk Enterprise Security and build the TDIR workflow. How to use Wayfinder? How to measure the value of my SOAR investment? Real-world examples of how SOAR enhancements improved efficiency, security, and ROI? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Thursday, December 11, 2025

[Register here] This thread for the Community Office Hours session on Splunk 10.0 Is Here: Your Guide to a Smooth Upgrade Journey_AMER on Thur, Dec 11, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is included in Splunk 10? What are the key innovations in Splunk 10 that customers should know about? What is the benefit of upgrading to Splunk 10? How can I upgrade to Splunk 10 and what is inclusive of upgrade readiness? How can I use the Splunk Health Assistant Add-on? (address EOL Upgrade Readiness App) SCP vs Splunk Enterprise Upgrade Readiness What are the breaking changes customers need to be aware of and action on? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Community Office Hours

Join the Conversation

Community Office Hours