Splunk Administration

Splunk Administration
Category Activity
rahulkumar
I’m working on ingesting logs from Azure Monitor into Splunk and currently the client provides the logs manually in C...
by rahulkumar Path Finder in Getting Data In 10-21-2025
1 2
1
2
Dmikos1271
In our Splunk environment, we currently ingest Azure AD logs and we have three different sourcetypes: azure:aad:signi...
by Dmikos1271 Explorer in Getting Data In 10-21-2025
0 1
0
1
cdevoe57
I am using the TA_nix addon to get information about the services on the servers.   I am only interested in indexing ...
by cdevoe57 Path Finder in Getting Data In 10-21-2025
0 9
0
9
dexcare-techops
Hi all,I'm looking for a way to copy all of the logging from an index to an S3 bucket on my company account.Ideally, ...
by dexcare-techops Engager in Deployment Architecture 10-20-2025
0 3
0
3
_Raj
Hi, Sample Data (CSV format) – student_id,student_name,class,school,subject,score1,Alice,10A,School1,Math,852,Bob,10A...
by _Raj Path Finder in Getting Data In 10-19-2025
0 9
0
9
_Raj
Hi,Please guide me how  to enable clustering (splunk enable cluster-master, splunk edit cluster-config) for one insta...
by _Raj Path Finder in Deployment Architecture 10-19-2025
0 5
0
5
martaBenedetti
Hi all,I'd like to create an alert that checks whether, as a triggered action of an alert, an email is being sent wit...
by martaBenedetti Path Finder in Monitoring Splunk 10-17-2025
0 0
0
0
zksvc
Hi all,Yesterday I had 8 Universal Forwarders visible in Forwarder Management. Today it shows 0.EnvironmentSplunk Ent...
by zksvc Contributor in Getting Data In 10-16-2025
0 2
0
2
zksvc
Hi everyone, I’m investigating an issue where UBA (User Behavior Analytics) data in Splunk appears to have stopped in...
by zksvc Contributor in Getting Data In 10-16-2025
0 4
0
4
_Raj
Hi all,How to apply props.conf and transforms.confSample Log Data2024-09-01 12:10:22 student=Alice subject=Math score...
by _Raj Path Finder in Getting Data In 10-15-2025
0 2
0
2
Rescudero
Hello,Due to the requirements of the project I am working on, all events will arrive at Splunk Cloud from SC4S. They ...
by Rescudero Engager in Getting Data In 10-15-2025
0 3
0
3
danielbb
We have cooked data coming from HFs, is there a way to perform ingestion rules on this cooked data?
by danielbb Motivator in Getting Data In 10-13-2025
0 2
0
2
AsmaF2025
Dear all, Can some one please review and clarify my doubts:In order to update the instance jquery 3.5 complaint and p...
by AsmaF2025 Explorer in Security 10-13-2025
0 0
0
0
beginne_Splunk
When 'tail -f /opt/streamfwd/var/log/streamfwd.log' is executedWhy do I get the following message?WARN [1406107101283...
by beginne_Splunk Explorer in Getting Data In 10-13-2025
0 4
0
4
viku7474
I am trying to fetch the Dell PowerScale metrics data into splunk via HF. I have installed the Add-On on the HF, but ...
by viku7474 Explorer in Getting Data In 10-13-2025
0 2
0
2
bt2025
NEED HELP: Not able to sign-in with default passwordOn 11OCT2025, I tried launching a brand new Splunk Enterprise v10...
by bt2025 Explorer in Security 10-12-2025
0 6
0
6
debsili05
This is what we are getting KVStore Upgrade Status:Upgrade Status: kvstore_upgrade_abortedStart Time: Mon Oct 6 21:52...
by debsili05 New Member in Getting Data In 10-11-2025
0 3
0
3
Hiattech
We have a requirement to have a 5 year data retention. Unfortunately, we discovered that Splunk has not been configur...
by Hiattech Explorer in Getting Data In 10-10-2025
0 8
0
8
splunkreal
Hello, is this query valid to check incoming network traffic to heavyforwarders?index=_internal source=*metrics.log* ...
by splunkreal Influencer in Monitoring Splunk 10-10-2025
0 4
0
4
tech_g706
Hi All,I would like to confirm whether a persistent queue can be used on an Intermediate Heavy Forwarder that receive...
by tech_g706 Path Finder in Getting Data In 10-10-2025
0 1
0
1
splunkreal
Hello, is Splunk opencti addon compatible on Splunk cluster (shc)?From 2/3 search heads we are getting this error: "2...
by splunkreal Influencer in Getting Data In 10-09-2025
0 2
0
2
Anit_Mathew
Hi team,Is there any way to onboard legacy windows (XP, Server 2000) logs to Splunk, without UF? Specifically non dom...
by Anit_Mathew Engager in Getting Data In 10-08-2025
0 6
0
6
gnagasri
Existing Env :1. Indexer Clustering2. Search head Clustering.For testing an Issue. I have a a standalone searchhead i...
by gnagasri Engager in Getting Data In 10-08-2025
0 3
0
3
KendallW
Hey gang, I'm using the Splunk Add on for Microsoft Azure to ingest AAD signin logs to Splunk under the azure:aad:sig...
by KendallW Contributor in Getting Data In 10-07-2025
0 4
0
4
andrewaalin
What is the significance of the list of fields in "search.log", in the line that contains "INFO LocalCollector - Fin...
by andrewaalin Explorer in Deployment Architecture 10-07-2025
3 2
3
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors