Splunk Administration

Splunk Administration
Category Activity
Na_Kang_Lim
Hi,So I have a HF instance, which receive multiple types of syslog on many different ports. Ideally, you would have a...
by Na_Kang_Lim Path Finder in Getting Data In 10-06-2025
0 17
0
17
maheshnc
We need to install UF on remote application servers (linux/windows) but as a splunk admin, I don't have direct access...
by maheshnc Path Finder in Getting Data In 10-06-2025
0 8
0
8
deepthi5
splunk query to find how much data is coming via hec , how much data is coming via dbconnect , how much data is comin...
by deepthi5 Path Finder in Getting Data In 10-05-2025
0 3
0
3
Nawab
I am getting below error on my dbconnect, every thing was working fineHTTP Error 400, HEC response body: {"text":"Inv...
by Nawab Communicator in Getting Data In 10-05-2025
0 3
0
3
Ghostoverflow25
Hi,I accidentally uploaded too much data on one day (a jsonl file) and violated the 500mb limit in place for the splu...
by Ghostoverflow25 Engager in Getting Data In 10-05-2025
0 5
0
5
mohsplunking
Hello Splunkers,I have a question around Monitoring a same File from different server, The situation is Server1, Serv...
by mohsplunking Path Finder in Getting Data In 10-05-2025
0 2
0
2
zksvc
I encountered an issue where the Active Directory configuration, despite being set in attack_range.yml, failed to pro...
by zksvc Contributor in Deployment Architecture 10-05-2025
0 0
0
0
mmohamed
Environment Setup:Splunk version: Upgraded from 9.0.7 -> 9.3.3OS:  Upgraded from Oracle Linux 7 (OL7) -> Oracle Linux...
by mmohamed New Member in Other Admin 10-04-2025
0 2
0
2
bapun18
Hi we wanted to migrate standalone indexer  to multisite cluster, with 2 site.Below are my questions1. Can I find out...
by bapun18 Communicator in Deployment Architecture 10-04-2025
0 2
0
2
MMershon
Hello,   Attempting to upgrade our test environment from 9.3.2 to 9.4.0 on Windows Server 2019 fails with the followi...
by MMershon Explorer in Security 10-02-2025
1 1
1
1
Paaattt
Has anyone encountered this issue and how did you fixed it on Splunkcloud and Enterprise Security "Identity: An error...
by Paaattt Explorer in Security 10-02-2025
1 7
1
7
dkeck
Hi,I have an HF running  this akamai integration TA (https://splunkbase.splunk.com/app/4310)I recently updated to 9.4...
by dkeck Influencer in Security 10-02-2025
0 1
0
1
rauldevilla
Hi Guys. I just installed splunk into a server with Ubuntu 14 OS. When I run sudo ./splunk start --accept-license I...
by rauldevilla New Member in Security 10-01-2025
0 3
0
3
GattyBiggz
Greeting,I am trying to identify users who have not had any activity in O365 for over 180 days, however my search is ...
by GattyBiggz Loves-to-Learn in Getting Data In 10-01-2025
0 1
0
1
ivohechmann
Hi all;Regarding the Splunk App for JenkinsWe have multiple jenkins instances in our environment; Each project is in ...
by ivohechmann Explorer in Getting Data In 09-30-2025
0 3
0
3
davidoff96
Some data would be mistagged as a different time zone, or would come in very late and would miss our alarms, since th...
by davidoff96 Path Finder in Getting Data In 09-29-2025
0 1
0
1
frank_yin
My goal is to:1. Default send everything from UF agent (excluded syslog source) to syslog group: chron-autolb group.2...
by frank_yin Loves-to-Learn Lots in Getting Data In 09-26-2025
0 1
0
1
mohsplunking
Hello Splunkers,Appreciate if anyone can help me here, I'm after a Best practices guide/ article for Windows Server L...
by mohsplunking Path Finder in Getting Data In 09-26-2025
0 2
0
2
maheshnc
I need to onboard CISCO IOS switch logs with splunk, we have a syslog-ng installed on HF, could somebody explain the ...
by maheshnc Path Finder in Getting Data In 09-26-2025
0 4
0
4
maheshnc
I need to integrate Dell Switches with Splunk using syslog-ng which is installed on, On-Prem HF, what are the prerequ...
by maheshnc Path Finder in Getting Data In 09-26-2025
0 1
0
1
maheshnc
Hello,Our operations team is supposed to perform OS Security patching on indexer cluster, search head, Heavy Forwarde...
by maheshnc Path Finder in Deployment Architecture 09-25-2025
0 3
0
3
Nraj87
I would like to run a copy of  PROD Indexer servers’ VMs in another site (DR setup) without mapping Cold Storage, to ...
by Nraj87 Explorer in Getting Data In 09-24-2025
0 4
0
4
xwill13
Hello, I am attempting to configure splunk to allow users to authenticate via CAC card using LDAP. However when I att...
by xwill13 Engager in Security 09-24-2025
0 18
0
18
sswigart
I am running windows version of Splunk Enterprise 9.4.2 stand alone. I have 17 older security logs saved in a  separa...
by sswigart Explorer in Getting Data In 09-24-2025
0 1
0
1
maheshnc
I want to ingest syslog from different devices like ESXI Hosts, firewalls (fortigate, palo alto), switches can somebo...
by maheshnc Path Finder in Deployment Architecture 09-23-2025
0 9
0
9
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors