Premium Solutions

Premium Solutions
Category Activity
tuts
 Hello Splunk Community,I have .evtx files from several devices, and I would like to analyze them using Splunk Univer...
by tuts Path Finder in Splunk Enterprise Security 2 hours ago
0 3
0
3
aluvian
Hi,We were using Splunk Enterprise (8.2.5) and ESS (7.2.0) on Debian 12. Everything was working fine until I upgraded...
by aluvian New Member in Splunk Enterprise Security 11 hours ago
0 0
0
0
Splunkers2
Hi all,I'm having issues comparing user field in Palo Alto traffic logs vs last user reported by Crowdstrike/Windows ...
by Splunkers2 New Member in Splunk Enterprise Security yesterday
0 0
0
0
wlight600
Hi! I'm creating custom alert action. I can use my alert action in save alert and Correlation search. But I meet ...
by wlight600 Engager in Splunk Enterprise Security yesterday
0 14
0
14
damianpadden
App 'Infoblox DDI' started successfully (id: 1725978494606) on asset: 'infoblox-enterprise'(id: 25)Loaded action exec...
by damianpadden Observer in Splunk SOAR yesterday
0 0
0
0
niks987
Hi All,Hope you all are doing well.I am very new to Splunk Enterprise security, and i need your help  to understand h...
by niks987 Explorer in Splunk Enterprise Security yesterday
0 0
0
0
naoki-randy-sh
こんにちはSplunkのオブザーバビリティプラットフォームでブラウザテスト用の多要素認証シナリオを設定できないかと考えていました。たとえば、時間ベースのワンタイムパスワード(TOTP)を使用する場合は、秘密鍵またはQRコードを生成して...
by naoki-randy-sh New Member in Splunk Observability Cloud yesterday
0 0
0
0
Pooja1
Hi,I want to import the entities via csv to entity management in Splunk ITSI,so please help me with this.Thanks
by Pooja1 Loves-to-Learn Everything in Splunk ITSI yesterday
0 2
0
2
vikas_gopal
Hello Splunk ES experts ,  I want to make a query which will produce MTTD (something like by analyzing the time diffe...
0 2
0
2
jaibalaraman
Hi  Can anyone please advice the search query to find out overall health status of VMware using metric log. index - v...
by jaibalaraman Path Finder in Splunk ITSI Monday
0 1
0
1
jluo_splunk
Does anyone have a script to automate deletion of entities in ITSI?
by jluo_splunk Splunk Employee Splunk Employee in Splunk ITSI Saturday
0 6
0
6
tdth
Hi all,Has anyone had experience matching Linux audit logs to CIM before?I installed the Add-on for Unix and Linux, b...
by tdth Engager in Splunk Enterprise Security Friday
0 3
0
3
grep
I am trying to be able to show the results of the drilldown search of a notable without having to leave the event/cas...
by grep New Member in Splunk SOAR Friday
0 0
0
0
N_K
I have an input playbook with two output variables. I can retrieve these variables when I call the playbook using the...
by N_K New Member in Splunk SOAR Thursday
0 3
0
3
hama89
KPIのみを表示するサービスアナライザーを作成したいのですが、作成することは可能ですか?可能であれば手順を知りたいです。
by hama89 New Member in Splunk ITSI Thursday
0 0
0
0
zksvc
I Have 60 Correlation Search in Content Management Some of my Correlation Search doesn't trigger to Incident Review b...
by zksvc Path Finder in Splunk Enterprise Security Thursday
0 0
0
0
rboyd9
Hi,We have a custom python service being monitored by APM using the Opentelemetry agent. We have been successful in t...
by rboyd9 New Member in Splunk Observability Cloud a week ago
0 3
0
3
wingspanner
A little background.  Our organization set up hundreds of service templates when we rolled out ITSI. We're trying to ...
by wingspanner New Member in Splunk ITSI a week ago
0 0
0
0
tuts
Hello, I am currently working in a SOC, and I want to test rules in Splunk ES using the BOTSv2 dataset. How can I con...
by tuts Path Finder in Splunk Enterprise Security a week ago
0 1
0
1
corti77
Hi,I am testing the Security Essentials App 3.8.0 in Splunk 9.0.8, and I found the same issue while trying to activat...
by corti77 Communicator in Splunk Enterprise Security a week ago
0 4
0
4
tadecleid
I found a similar post that did not quite fit the bill of what I am trying to do.I want to be able to create a link g...
by tadecleid New Member in Splunk Enterprise Security a week ago
0 0
0
0
SplkhdA_1
First of all, hello everyone. I have a mac computer. I installed Splunk enterprise security on this Mac M1 computer. ...
by SplkhdA_1 Engager in Splunk SOAR a week ago
0 13
0
13
johnlee2327
All I learning for prompt is that I need to open broser and prompt with SOAR GUI.Is any Rest API or link available fo...
by johnlee2327 Explorer in Splunk SOAR 2 weeks ago
0 2
0
2
sreejeshchethil
Hi,Please share the configuration documents on panorama side for integrating this app with Splunk SOAR
by sreejeshchethil Observer in Splunk SOAR 2 weeks ago
0 0
0
0
catherinelam
Hello, for this question, I am referencing the documentation page: https://docs.splunk.com/Documentation/SOARonprem/6...
by catherinelam Explorer in Splunk SOAR 2 weeks ago
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security and Observability Editions are held every month.

Where are you on your adoption journey? Take the quick Security or Observability Resilience Check quiz to find out!
Get Updates on the Splunk Community!

Cloud Platform | Customer Change Announcement: Email Notification Will Be Available ...

The Notification Team is migrating our email service provider since currently there’s no support ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...
Top Karma Authors