Monitoring Splunk

Community Activity

_configtracker in Splunk Cloud? Hello all, I'm trying to get data from _configtracker in Splunk Cloud, as I cannot seem to find saved search changes... by Jakob45a New Member in Monitoring Splunk 10-07-2026 0 1	0	1
Splunk HF parallel pipelines utilization Hi, We have high-volume syslog input configured on a HF with Splunk v.7.2.5 and we started noticing TailReader-0 pip... by vanvan Path Finder in Monitoring Splunk 10-03-2026 0 4	0	4
Splunk bucket size analysis Issue:Buckets health indicator reports gigantic warm bucket for _metrics,but the settled warm bucket is approximately... by jinx New Member in Monitoring Splunk 09-19-2026 0 0	0	0
Data quality, track log formats changes Hello, what would you do to track log changes, maybe using "punct" field?Thanks for your help! by splunkreal Influencer in Monitoring Splunk 09-11-2026 0 1	0	1
Paessler PRTG Modular Input “After upgrading Splunk to 10.2, the apps are no longer usable. May I know if there are any methods to collect PRTG l... by Alan_Chan Explorer in Monitoring Splunk 08-27-2026 0 1	0	1
[SailPoint] Get older events Hello, I enabled the app SailPoint Identity Security Cloud AuditEvent but I'd like to ingest older event. There is no... by MandarinDefense New Member in Monitoring Splunk 08-22-2026 0 1	0	1
503 Service unavailable - Is my splunkd crashed ? Could not able to access Splunkweb. ERROR : 503 Service unavailable The splunkd daemon cannot be reached by splunkweb... by chimbudp Contributor in Monitoring Splunk 07-30-2026 1 8	1	8
ERROR TcpOutputFd [TcpOutEloop] - Read error. An existing connection was forcibly closed by the remote host. ERROR TcpOutputFd [TcpOutEloop] - Read error. An existing connection was forcibly closed by the remote host.I have th... by Balshore Loves-to-Learn Lots in Monitoring Splunk 07-03-2026 0 6	0	6
Properly configuring the Monitoring Console Hi folks, Just a hopefully quick and basic question, I read the following two docs but I am still not quite clear on ... by JohnEGones Communicator in Monitoring Splunk 06-25-2026 0 3	0	3
Hardware Monitoring: Best way to get PERC H710P metrics into Splunk? Hi everyone, I’ve been hanging around the Splunk community for a while, mostly dealing with application logs, but I’v... by licadiw273 New Member in Monitoring Splunk 06-17-2026 0 1	0	1
Monitoring Console configuration problem\|\|Indexers (which part of indexer cluster) does appear at MC\|\|mc_auto_config "I am writing this thread to summarize the Monitoring Console (MC) configuration and highlight the non-obvious nuance... by Wohamed_wakkad Path Finder in Monitoring Splunk 06-15-2026 0 2	0	2
Dedicated Monitoring Console configuration problem - "splunk_server/splunk_server_group do not match any search peer" Hi there, I'm building a test Splunk deployment: 3 SH in cluster, 2x2 IX in multi-site cluster, 1 admin node(CM, Dep... by ikulcsar Communicator in Monitoring Splunk 06-13-2026 0 9	0	9
Personal Access Token How to set up the ' Personal Access Token' using the trial account by narenrecw New Member in Monitoring Splunk 06-07-2026 0 2	0	2
February 2026 Patches - Break RPC calls to DC There have been reports that the February 2026 MS update kills the RPC call to the Domain Controllers for various ver... by ASierra Explorer in Monitoring Splunk 05-13-2026 0 1	0	1
Why doesn’t the Archive Processor verify if there are new unread events within my archive file? In my use-case my source log (tailed by a monitor input stanza) is being archived once a day at midnight and the resu... by mgaraventa_splu Splunk Employee in Monitoring Splunk 05-05-2026 3 3	3	3
Need help with Splunk query for MTTD and MTTT per SOC analyst On our SOC operations dashboard we can already see the overall MTTD (Mean Time to Detect) and MTTT (Mean Time to Tria... by splunker_ak Explorer in Monitoring Splunk 04-13-2026 0 4	0	4
Cluster manager troubleshooting Search peer appprd09 has the following message: The current bundle directory contains a large lookup file that might ... by Darkvader Explorer in Monitoring Splunk 04-01-2026 0 1	0	1
Dynatrace Browser Monitor for Search Execution I'm setting up Dynatrace synthetic monitors to replicate user experience in Splunk and I am having trouble getting a ... by Chris_Urman Engager in Monitoring Splunk 03-26-2026 0 4	0	4
As an administrator how can I list the set of indexes one of my enterprise users has if they have multiple roles. sometimes you just dont want to navigate from user menu to roles menu, then to index access listing. i'd like to just... by cesaccenturefed Path Finder in Monitoring Splunk 03-26-2026 0 2	0	2
Where can I find update interval for Universal Forwarder Dear all,could you please tell me how often the Universal Forwarder checks for and downloads the configuration file f... by Alberto_Astolf1 Explorer in Monitoring Splunk 03-23-2026 0 21	0	21
Audit.log restart_splunkd- What produces these messages, and how can I tell if splunkd restarted? I'm seeing many action=restart_splunkd messages from my "_audit" index. I can tell from my processor status that splu... by hartsoftware Engager in Monitoring Splunk 03-17-2026 2 11	2	11
Why is Cluster Master logging strange errors? Hello Splunkers, I'm here to ask you for a bit or your wisdom. Context : This happens since the upgrade from 8.2.x ... by AntoineDRN Path Finder in Monitoring Splunk 03-09-2026 0 3	0	3
How to display a procedure (KB) associated with the Splunk alert Hi, How to display a procedure (KB) associated with the Splunk alert, i have tu use SPL ? Do you have a client exampl... by miguelmail1314 Explorer in Monitoring Splunk 03-05-2026 0 6	0	6
Splunk Add-on for 0365: Why am I receiving Invalid Token? Hi , Why are we receiving this kind of issue on "o365:cas:api"while the others listed below are working as expected. ... by jadengoho Builder in Monitoring Splunk 02-19-2026 0 3	0	3
Wrong host license usage report / squash_threshold Hello, if you have license usage error when running a query on license logs, it can be based on Splunk server.conf se... by splunkreal Influencer in Monitoring Splunk 02-19-2026 0 1	0	1