Splunk Administration

Splunk Administration
Category Activity
Lowell
Anyone know if it's possible to deploy different apps based on the clients build or version number? I thought I had ...
by Lowell Super Champion in Deployment Architecture 06-24-2010
1 3
1
3
heterodyned
I am planning to integrate Splunk data with MARS, would the cloning option work for Non-Splunk receiver as well? Or i...
by heterodyned Path Finder in Getting Data In 06-24-2010
1 5
1
5
jambajuice
We are trying to filter events from the Windows Event Log that are pulled using WMI. Here is the transforms.conf: [...
by jambajuice Communicator in Getting Data In 06-24-2010
0 4
0
4
Mike_Spellane
I installed the splunk for cisco security app, and at first the firewall overview dashboard worked great, but after a...
by Mike_Spellane New Member in Security 06-24-2010
0 5
0
5
bryancrabtree
I am trying to link events from two separate sourcetypes together that have different fields available. The "corps_ap...
by bryancrabtree Engager in Getting Data In 06-24-2010
3 1
3
1
Voltaire
I received this error in the Windows app after configuring the app and 4.1.2 upgrade. When the app loads its defaul...
by Voltaire Communicator in Installation 06-24-2010
3 6
3
6
Jaci
I would like to know how to automate the package to install across a few hundred servers. I can install the pkg m...
by Jaci Splunk Employee Splunk Employee in Installation 06-24-2010
1 7
1
7
snowmizer
I'm trying to set up fschange to monitor a folder on one of our servers (running Splunk v4.1.2) using the following s...
by snowmizer Communicator in Getting Data In 06-24-2010
1 3
1
3
westar
I need to run a shell script or Linux command inside my search to obtain external Ldap information. I have a UserID ...
by westar Engager in Getting Data In 06-24-2010
2 3
2
3
alankar
How can we specify authorization at data input source level? Like I created a TCP source, but I want it to be availab...
by alankar Engager in Security 06-23-2010
2 1
2
1
cbscribe
I’m building a report that finds the number of unique users in our activity log each day: sourcetype="accountTransac...
by cbscribe Explorer in Knowledge Management 06-23-2010
1 4
1
4
katalinali
I have polled wmi query from windows 2000 to splunk, as there is not PerfFormattedData class. I use PerfRawData, but ...
by katalinali Path Finder in Getting Data In 06-23-2010
0 3
0
3
Will_Hayes
How do you install and configure the Splunk for Cisco Security app found here: http://www.splunkbase.com/apps/All/4....
by Will_Hayes Splunk Employee Splunk Employee in Security 06-23-2010
2 1
2
1
omlojoha
Is it possible to create a role which can create and delete users without giving them admin rights? For instance a te...
by omlojoha Engager in Security 06-23-2010
1 1
1
1
mctester
on apt-get upgrade or apt-get install, splunk does NOT stop/start it's service. that's fine, but if an operator mis...
by mctester Communicator in Installation 06-23-2010
0 1
0
1
runwithscizzors
Looking for the best way to collect Disk Free Space from a Linux box to a Windows Indexer. Company policy wont let m...
by runwithscizzors New Member in Getting Data In 06-23-2010
0 2
0
2
r31floyd
I want to install Splunk to run under SUSE Linux version 10 running on an IFL processor under z/VM on an IBM z9.
by r31floyd Engager in Installation 06-23-2010
1 1
1
1
maverick
After I install Splunk or make Splunk config changes, is a server reboot required?
by maverick Splunk Employee Splunk Employee in Installation 06-23-2010
2 1
2
1
Justin_Grant
Windows doesn't have a built-in way to unpack the .tar.gz format used by Splunk apps downloaded from Splunkbase. Wha...
by Justin_Grant Contributor in Getting Data In 06-23-2010
3 3
3
3
Jason
Is it possible to change or completely remove the menuing/header system from above the charts/graphs on a view? (or a...
by Jason Motivator in Security 06-23-2010
1 5
1
5
benoitvanderbec
We installed the PDF server. We followed the instruction in the manual and checked if Xvfb was installed. The only di...
by benoitvanderbec Engager in Installation 06-23-2010
1 1
1
1
Hazel
Hello, Splunk.com specifies that if you want to use the pdf reporting you have to have xauth and xvfb installed on a...
by Hazel Communicator in Deployment Architecture 06-22-2010
0 10
0
10
mihika
where do I find the software for splunk instance. I want to collect the syslog or events from a remote client.
by mihika Engager in Getting Data In 06-22-2010
1 1
1
1
hiddenkirby
How would one get a list of all the users logged in via the API In a ruby script i tried this... (POST seems odd fo...
by hiddenkirby Contributor in Getting Data In 06-22-2010
2 4
2
4
sanju005ind
I have a around 800 forwarders in my distributed environment.Most of them would be 3.4.11 or 3.3.x and only around 50...
by sanju005ind Communicator in Getting Data In 06-22-2010
2 10
2
10
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.

How digitally resilient are you? Take a quick Digital Resilience Assessment to find out if you're prepared for disruption!
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...
Top Karma Authors