Monitoring Splunk

Community Activity

measuring search load on indexers Our indexers are reporting “server-busy” errors back to the kinesis data firehoses periodically.This is an indication... by esalesapns2 Communicator in Monitoring Splunk 02-09-2026 0 3	0	3
Log Ingestion Failure by Sourcetype Hello folks,I have a compliance control requirement to alert when there is a log ingestion failure to Splunk. The des... by b17gunnr Path Finder in Monitoring Splunk 02-09-2026 0 6	0	6
mvexpand gives "mvexpand output will be truncated due to excessive memory usage" I give my splunk 50GB Mem with max_mem_usage_mb = 50480 in the limits.conf but splunk 5.0.3 gives me a "mvexpand out... by marcokrueger Path Finder in Monitoring Splunk 02-02-2026 1 15	1	15
How to detect "Mean Time to Detect" in Splunk ES Hi All, I have SOC metric reporting dashboards for MTTR (mean time to respond) and MTTC (mean time to close) but am s... by loganallen Loves-to-Learn in Monitoring Splunk 01-31-2026 0 2	0	2
MC Historic License Usage Broken Recently upgraded to 9.2.2 and Historic License Usage panels in the Monitoring Console are now broken. The panels in ... by R15 Communicator in Monitoring Splunk 01-22-2026 0 4	0	4
Splunk 9.4.0 - hostname, issues with license manager reports after hostname change Hi, I have recently changed the OS hostname, followed by Splunk hostname change on a single node deployment. I am sti... by Space_Crawler Observer in Monitoring Splunk 12-29-2025 0 3	0	3
Alerts So i have a search which show the indexes that have 0 events last 24hr. I want to send this result as an alert to mi... by SN1 Path Finder in Monitoring Splunk 12-12-2025 0 4	0	4
Need help with a Splunkd log message this message is displaying in the splunkd logs on syslog server.we are forwarding data from syslog server to DMZ serv... by SN1 Path Finder in Monitoring Splunk 12-03-2025 0 2	0	2
CVE-2025-9230 - OpenSSL 1.0.2zl-fips Vulnerability Hello, We have been reported that there is an open vulnerability with openssl for SplunkUniversal Forwarder, as descr... by gteccr Explorer in Monitoring Splunk 11-26-2025 0 7	0	7
Email alerts not triggering Hello,we have a DMC configured on Splunk Licence Master; I need to enable all the critical resource utilization aler... by maheshnc Path Finder in Monitoring Splunk 11-13-2025 0 1	0	1
Can I combine 5 KPI lane into One dashboard? Hi GuysI am new to Splunk and here is my inquiry, I have 5 KPI lane that monitor/measure different aspect of an Oracl... by charbelcharro New Member in Monitoring Splunk 11-05-2025 0 2	0	2
Need to drop container metrics from specific namespaces using splunk otel collector Kubernetes cluster receiver We are monitoring a GKE cluster with Splunk OTEL collector Kubernetes cluster receiver pod, and want to skip or exclu... by vyomsap New Member in Monitoring Splunk 10-29-2025 0 2	0	2
Dashboard For Splunk Platform, Ingestion Errors, CIM Compliant issues etc Dears,Looking for the customer dashboard if it is available with anyone to monitor many things likeplatform health (I... by Sandivsu Loves-to-Learn Lots in Monitoring Splunk 10-23-2025 0 2	0	2
alert action email with empty attachment Hi all,I'd like to create an alert that checks whether, as a triggered action of an alert, an email is being sent wit... by martaBenedetti Path Finder in Monitoring Splunk 10-17-2025 0 0	0	0
Measure incoming network traffic on heavy forwarders Hello, is this query valid to check incoming network traffic to heavyforwarders?index=_internal source=metrics.log ... by splunkreal Influencer in Monitoring Splunk 10-10-2025 0 4	0	4
Are you ready for TLS 1.3 adoption? If you have enabled splunk S2S compression, you can skip reading further. compressed = trueTLS 1.3 removed compressi... by hrawat Splunk Employee in Monitoring Splunk 09-20-2025 3 4	3	4
ERROR UserManagerPro user=“nobody” had no roles I'm seeing hundreds of these errors in the internal splunkd logs01-16-2025 12:05:00.584 -0600 ERROR UserManagerPro [7... by paleewawa Explorer in Monitoring Splunk 09-15-2025 0 3	0	3
A lot of error messages : user=“nobody” had no roles after upgrade Since I migrated splunk to version 9.2.4, I've been getting a lot of error messages from all Splunk servers :WARN Use... by pmerlin1 Path Finder in Monitoring Splunk 09-15-2025 1 4	1	4
Monitor only the end of a very long file Good morning,I need to monitor a very long file containing data from 2021 onwards.I'm only interested in data from la... by AlexIta95 New Member in Monitoring Splunk 09-10-2025 0 3	0	3
Host log monitoring Is there any form of automation where we would be able to identify if one of our hosts stopped sending logs to splunk... by dr_juice Explorer in Monitoring Splunk 09-10-2025 0 1	0	1
unable to get the recent logs - error Unable to get the recent logs for today for an production environment. It is throwing an error stating "ERROR [Proper... by isahu Observer in Monitoring Splunk 08-25-2025 0 3	0	3
Rest query showing deleted indexes We have 2 indexers in a cluster and are running 9.4.0I removed an index from the cluster by removing its stanza from ... by M1k3Smith Explorer in Monitoring Splunk 08-22-2025 0 5	0	5
Splunk Search Head Deployer HA Hi,To implement high availability for the Splunk Search Head Deployer across multiple regions, would it be possible t... by srek3502 Explorer in Monitoring Splunk 08-15-2025 0 6	0	6
Host License Usage When running license usage reports by host we are hitting the squash_threshold in server.conf.I've researched this an... by DataWrangler Explorer in Monitoring Splunk 08-14-2025 0 11	0	11
SCOM onboard in AppDynamics SaaS based Hello Guys, We have SCOM on physical box & want to onboard in AppDynamics for monitoring. customer wants to onboard w... by dineshchoudhary Loves-to-Learn Lots in Monitoring Splunk 08-04-2025 0 4	0	4