Splunk Administration

Splunk Administration
Category Activity
jatin3101
Hello.I have some question about the captain selection process.(i am very new to splunk its only been 2 months so if ...
by jatin3101 Engager in Deployment Architecture 01-10-2026
0 6
0
6
Nicolas2203
 Hello Splunk community,I’m working with Splunk Enterprise On-Prem and have three Heavy Forwarders (HFs) in my enviro...
by Nicolas2203 Path Finder in Getting Data In 01-09-2026
0 2
0
2
vikasg
Hello Team , I want to send splunk HF windows security logs to a syslog server . I have syslog-ng installed there whi...
by vikasg Loves-to-Learn Lots in Getting Data In 01-08-2026
0 4
0
4
vh
Is there any documentation on creating an input for this app? (https://splunkbase.splunk.com/app/6608)I installed the...
by vh Explorer in Getting Data In 01-08-2026
0 7
0
7
spl_aficionado
We configured rsyslog to route data from a certain host to the file system of the server, and what we see is that lot...
by spl_aficionado Path Finder in Getting Data In 01-07-2026
0 6
0
6
_pravin
HiI am trying to understand how the metrics events are being tracked and how the disk space is utilised in Splunk.I a...
by _pravin Contributor in Getting Data In 01-07-2026
0 0
0
0
mmendez-opentec
Hello,I'm trying to access the Data Management Experience and specifically Edge Processors. Our company has Splunk En...
by mmendez-opentec Explorer in Getting Data In 01-07-2026
0 1
0
1
wrangler2x
I'm on the 6.5.2 release and I have Duo turned on in the Splunk configs. It has been working great, but I just found ...
by wrangler2x Motivator in Security 01-06-2026
2 3
2
3
pfabrizi
WE performed a test this morning with DUO\SPLUNK and it worked fine, however it also forced our local splunk accounts...
by pfabrizi Path Finder in Security 01-06-2026
1 4
1
4
horacio
Hi, I am doing a migration, and I need this version. I wonder if someone have the links. To migrate from version 7.1....
by horacio Engager in Installation 01-05-2026
0 6
0
6
karn
Hi,I am test using Edge Processor (Data Management).I have just enable Edge Processors from Data Management App on Sp...
by karn Path Finder in Getting Data In 01-05-2026
0 2
0
2
ARC1
Can you clarify Splunk Data Lake support around schema (schema-on-read vs enforced), available APIs for ingest/query,...
by ARC1 Loves-to-Learn in Deployment Architecture 01-04-2026
0 11
0
11
falcon
I have multiple fields under the interesting fields section named field1, field2, field3, and so on. Each of these fi...
by falcon Observer in Getting Data In 01-02-2026
0 4
0
4
maheshnc
Hello,I need to upgrade the o365 add-On to the latest version on both the search head and the heavy forwarder, can so...
by maheshnc Path Finder in Getting Data In 01-02-2026
0 5
0
5
drggfish1
I am trying to configure the Splunk Add-on for AWS for brining in CloudTrail logs via SQS S3. I have the following Us...
by drggfish1 Explorer in Getting Data In 01-02-2026
0 3
0
3
Poojitha
Hi All,I have a requirement  where I have to write metrics data to metrics index from existing events index as soon a...
by Poojitha Communicator in Getting Data In 12-31-2025
0 3
0
3
splunkisaurus
Greetings,    I am trying to create a little TA to run a command to collect status for the nessus agent. I have it to...
by splunkisaurus Observer in Getting Data In 12-30-2025
0 12
0
12
andrewtrobec
Hello!I am working with version 4.1.3 (latest) of the Splunk Add-on for Microsoft Cloud Services that is installed on...
by andrewtrobec Motivator in Getting Data In 12-30-2025
0 10
0
10
yuanliu
I am onboarding a JSON dataset whose event size is very close to 1MB.  I have to increase TRUNCATE to 1000000 (from d...
by SplunkTrust SplunkTrust in Getting Data In 12-29-2025
0 2
0
2
Space_Crawler
Hi, I have recently changed the OS hostname, followed by Splunk hostname change on a single node deployment. I am sti...
by Space_Crawler Observer in Monitoring Splunk 12-29-2025
0 3
0
3
dsfyxcasdcertzu
We're updating our Linux Servers to Debian 12. A few host went "missing" afterwards in Splunk.While investigating int...
by dsfyxcasdcertzu Explorer in Getting Data In 12-23-2025
0 4
0
4
ThuLe
Hello everyone,We are using a Universal Forwarder (UF) as an intermediate forwarder to send logs from other UFs in ou...
by ThuLe Explorer in Getting Data In 12-22-2025
0 1
0
1
drggfish1
I am getting a mismatch between the version of OPENSSL installed on my OS and in the Universal Forwarder. It seems to...
by drggfish1 Explorer in Getting Data In 12-21-2025
0 5
0
5
shashankk
I am trying to setup Splunk choropleth world map for the first time.Refer below splunk query:index=app_events_test so...
by shashankk Communicator in Security 12-20-2025
0 3
0
3
NoSpaces
Have a nice day, everyone!For continuous event truncation tracking, I have a simple alert that notifies me about trun...
by NoSpaces Contributor in Getting Data In 12-19-2025
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...
Top Karma Authors