Community Office Hours

Tuesday, January 20, 2026

[Register here]. This thread is for the Community Office Hours session on Application Performance Monitoring (APM): Ask me Anything on Tue, January 20, 2026 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How can I best use Call Graphs? How do I use Service Grouping? Where can I find APM utilization dashboards? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, January 21, 2026

[Register Here] This thread is for the Community Office Hours session on Security: Splunk Threat Research Team - Security Content AMA on Wednesday, Jan 21, 2026 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the latest security content updates from the Splunk Threat Research Team? What are the best practices for implementing the Splunk Technology Add-on for Ollama? What tips and tricks can help leverage Splunk Attack Range, Contentctl, and other resources developed by the Splunk Threat Research Team? What new analytic stories and detections can surface AI-enabled workflows to help you detect and respond to emerging threats across critical enterprise platforms? How do the detections work across the integration between Cisco Talos and Splunk? Any specific questions you have when you leverage the out-of-box-detections? Any other questions about the team’s content and resources! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Thursday, January 22, 2026

[Register HERE]. This thread is for the Community Office Hours session on Platform AI: Ask me Anything on Thurs, January 22, 2026 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What new AI tools and capabilities are available today? How can I get started with MCP server? What are some common use cases to get started with the AI Toolkit or DSDL app? How can Splunk help me monitor and secure my generative AI applications? Can I develop and package a custom machine learning model in Splunk? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Wednesday, February 18, 2026

[Register Here ] This thread is for the Community Office Hours session on Security: Insider Threats on Wednesday, Feb 18, 2026 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the most common insider threats today, and what are the typical indicators associated with them? What are the key considerations when detecting and analyzing insider threats? What are the best practices for detecting and investigating insider threats using Splunk? How can I maximize the use of threat intelligence and contextual insights when investigating insider threats? How can I best leverage data from Splunk to understand insider threat trends? How can machine learning and AI be used to scale your analytics? Can you provide insights on how User and Entity Behavior Analytics (UEBA) helps detect insider threats? How does the risk scoring work? Any other questions about the team’s content and resources! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, February 19, 2026

[Register here] This thread for the Community Office Hours session on Our Comprehensive Guide to SPL2: Navigating New Features and Optimizing Workflows on Thur, Feb 19, 2026 at 11am PT / 2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? Can you provide examples of how the SQL-like syntax in SPL2 can be used for common data analysis tasks? What is the module editor and how does it help me do my job? What are the expected performance improvements when using SPL2 compared to traditional SPL for large datasets or complex queries? How does the "point-and-click SPL to SPL2 converter" work, and what are its limitations? Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

Wednesday, March 18, 2026

[Register Here] This thread is for the Community Office Hours session on Security: Enterprise Security Essentials and Enterprise Security Premier on Wednesday, March 18, 2026 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is available in Splunk Enterprise Security (ES) Premier that is not available in Splunk Enterprise Security (ES) Essentials? What makes ES Essentials better than ES 7.X? What new or improved use cases should I expect ES Premier to help me deliver? What should I consider or prepare if I’m currently using ES Essentials and planning to migrate to ES Premier? What will happen to my dashboards, configurations, and investigations if I upgrade from ES Essentials to ES Premier? What sort of education or professional services are available for me to build an expert practice in ES Essentials or ES Premier? What does the SOAR integration look like for ES Essentials and ES Premier? How does UEBA integrate with ES Premier? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Thursday, March 19, 2026

[Watch On-Demand] This thread for the Community Office Hours session on AI-Powered Observability and Observability for AI on March 19th 2026 | 11:00am - 12:00pm PT Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How can I leverage Splunk’s AI capabilities to proactively detect anomalies and remediate incidents? What are some common challenges or limitations when implementing AI for observability at scale? How can I track and optimize cost and resource usage across my AI apps and services? Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

1

Thursday, March 26, 2026

[Register here] This thread for the Community Office Hours session on Splunk InfraMon and APM on March 26th 2026 | 11:00am - 12:00pm PT Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How can I best use Call Graphs? How do I use Service Grouping? Where can I find APM utilization dashboards? What are some enhancements to the Kubernetes Monitoring experience in Splunk IM? How do I use and customize Kubernetes Monitoring? What are best practices for optimizing Kubernetes alerts and troubleshooting workflows? What are some top services that I should be monitoring? Anything else you'd like to learn? Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

Thursday, April 16, 2026

[Register here] This thread for the Community Office Hours session on Database Monitoring in Observability Cloud on April 16 2026 | 11:00am - 12:00pm PT Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? How do I proactively find and resolve slow queries? How do I connect database performance with application and infrastructure performance? What’s the best way to troubleshoot query performance and find the root cause? Can you provide tips for query optimization? Do I need a new agent, and how do I configure Observability Cloud to collect database telemetry? Anything else you'd like to learn! Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

Wednesday, April 22, 2026

[Register Here] This thread is for the Community Office Hours session on Security: Splunk AI in Security AMA on Wednesday, April 22, 2026 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are best practices for leveraging the AI Toolkit and AI Assistant in Security? What are some key benefits? What are some of the best approaches for leveraging Splunk's AI capabilities with my existing security workflows? How can investigations be streamlined with the AI Assistant in Security? How can Splunk's AI capabilities for security accelerate advanced threat detection and response? How can Splunk's AI offerings help support custom security use cases? Is a separate license required for Splunk's AI for security capabilities? Are there any resources or training programs available to help teams adopt Splunk AI in security? Anything else you’d like to learn? Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, June 11, 2026

[Register Here] This thread is for the Community Office Hours session on Splunk Observability Cloud + Cisco ThousandEyes on Thursday, June 11, 2026 at 11am PT/2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. Today’s digital environments span applications, infrastructure, and networks including the public internet and third-party services you don’t control. But most teams are still operating with fragmented tools and siloed data. So when something breaks, you end up in the same place every time: long war rooms, slow handoffs, and one basic question that’s surprisingly hard to answer. Is it the app, the infrastructure, or the network? Splunk Observability Cloud, combined with ThousandEyes, changes that. Together, they provide end-to-end visibility across applications, infrastructure, and owned and unowned networks. Bring your real scenarios especially the ones where it’s unclear where the issue is coming from and we’ll walk through how to approach them using a unified view across the stack. Look forward to seeing you there!

0 attendees

0

Tuesday, June 30, 2026

[Register Here] This thread is for the Community Office Hours session on Optimizing Metrics Telemetry to Reduce Observability Costs on Tuesday, June 30 at 11am PT/2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - What can I do if I'm struggling with a specific cost driver? - How do I interpret my Usage Analytics dashboard? - How can I architect my pipeline for better performance? - Anything else you'd like to ask! Looking forward to seeing you there!

0 attendees

0

Thursday, July 23, 2026

[Register HERE]. This thread is for the Community Office Hours session on Splunk MCP Server: Ask Me Anything on Thurs, July 23, 2026 at 11:00 AM PT / 2:00 PM ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. In this session, we’ll focus on Splunk MCP Server and how it helps connect AI assistants and agents with Splunk through a secure, standardized interface. Join us to learn how to get started, understand key prerequisites and permissions, explore admin capabilities, and see how MCP Server can help users explore Splunk. What can I ask in this AMA? What is Splunk MCP Server and why is it useful? How can I get started with MCP Server? What prerequisites or permissions do I need before using MCP Server? What Admin capabilities does Splunk MCP Server provide? How can MCP Server help me explore Splunk data and run SPL searches? What are some common use cases for MCP Server across security, observability, and platform workflows? Anything else you’d like to learn about MCP Server! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

1

0

Wednesday, July 29, 2026

[Register here] Join our interactive Detection Engineering office hours for direct, actionable guidance from the experts who manage our internal security operations. Bring your toughest challenges—from broken detections to architectural hurdles—and let’s get you to production-ready. Focus Areas Detection Tuning: Reduce false positives. Coverage Mapping: Align with MITRE ATT&CK. Automation: Build repeatable CI/CD pipelines. Advanced Alerting: Surface complex attack patterns. AI Integration: Accelerate content with high-fidelity context. How to Participate Submit Your Questions (Optional): While not required, we encourage you to submit your scenarios during registration. Pre-submitted questions are prioritized. Join the Discussion: Connect with us in the #office-hours Slack channel. Live Q&A: We will open the floor to all participants after addressing pre-submitted topics. Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attendees

0

Thursday, July 30, 2026

[Register Here] This thread is for the Community Office Hours session on Splunk ITSI 5.0 on Thursday, July 30, 2026 at 11am PT/2pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? - What are the key updates in this new launch that I should know about? - How will it fit into my existing architecture? - How can I incorporate ITSI's AI-powered features like EventIQ to help reduce alert noise? - What kinds of Executive Dashboards can I build to visualize the health of the business? - How can I respond to issues faster with features like Episode Summarization? - Anything else you’d like to learn! Look forward to seeing you there!

0 attendees

0

Thursday, August 20, 2026

Register here. This thread is for the Community Office Hours session on Splunk AI Toolkit: Build AI Agents and More on Thurs, August 20, 2026 at 11:00 AM PT / 2:00 PM ET. Join this session to ask the experts about Agent Launchpad, one of AI Toolkit's latest capabilities! Community Office Hours is an ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What is Agent Launchpad, and what kinds of agents can I build with it? What are common use cases for Agent Launchpad across SOC, IT Ops, SRE, and platform operations? How is Agent Launchpad different from Splunk AI Assistant, SOAR, or a general-purpose agent builder? How do I create an agent and connect it to Splunk data, MCP tools, knowledge sources, or external systems? How can agents be launched from Search, alerts, or scheduled searches? What hosted models are available, and can I bring my own LLM? How does Agent Launchpad help users review, debug, and trust agent outputs? What should I know about permissions, governance, and secure use of agents? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

Thursday, October 15, 2026

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to mastering the latest Splunk Enterprise Security innovations. Join us to move from theory to practice as we explore how to defend faster and more autonomously than ever before. Whether you’re looking to get more value from your current deployment or exploring the benefits of ES Premier, this series provides a clear roadmap for your security journey. Review the schedule below and join us for the sessions that best fit your team's needs. [REGISTER HERE] Bring your technical questions to our open forum and get real-world advice on optimizing your Splunk ES deployment. Whether you're tuning detections or exploring the benefits of ES Premier, you'll leave with clear next steps for your security roadmap. Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. We look forward to connecting with you!

0 attending

0

Community Office Hours

Join the Conversation

Community Office Hours