Splunk Administration

Splunk Administration
Category Activity
ddrillic
We have roughly 10k-15k UFs in the company and we wonder in which route to go for ongoing maintenance of the UFs, whe...
by ddrillic Ultra Champion in Deployment Architecture 10-03-2026
0 5
0
5
vanvan
Hi, We have high-volume syslog input configured on a HF with Splunk v.7.2.5 and we started noticing TailReader-0 pip...
by vanvan Path Finder in Monitoring Splunk 10-03-2026
0 4
0
4
Beginner2
Some Search Heads show "Up" status but other search heads are always show "Pending". I want to know that how to solve...
by Beginner2 Observer in Deployment Architecture 10-01-2026
0 1
0
1
ddrillic
I encountered an interesting case involving a hierarchical set of monitor stanzas within the complex waslogs configur...
by ddrillic Ultra Champion in Getting Data In 10-01-2026
0 4
0
4
Priyanka8440
Hello Team,I am working on a requirement to discover cryptographic objects using Splunk. I need to collect relevant l...
by Priyanka8440 New Member in Getting Data In 09-23-2026
0 4
0
4
ddrillic
Below is our csv log sample, and so far the following is working for us at the UF level - INDEXED_EXTRACTIONS = csv F...
by ddrillic Ultra Champion in Getting Data In 09-21-2026
0 5
0
5
jinx
Issue:Buckets health indicator reports gigantic warm bucket for _metrics,but the settled warm bucket is approximately...
by jinx New Member in Monitoring Splunk 09-19-2026
0 0
0
0
NullZero
IHAC which has been seeing poor performance on their DS, not surprising as it has over 10,000 hosts calling home and ...
by NullZero Communicator in Deployment Architecture 09-16-2026
0 4
0
4
b17gunnr
Hello Friends,I have what might be considered a strange request. I have a static unbound.conf file living on a dns se...
by b17gunnr Path Finder in Getting Data In 09-15-2026
0 3
0
3
ddrillic
I have the following configurations deployed on the Universal Forwarder. However Splunk is incorrectly treating the f...
by ddrillic Ultra Champion in Getting Data In 09-15-2026
0 2
0
2
splunkreal
Hello, what would you do to track log changes, maybe using "punct" field?Thanks for your help!
by splunkreal Influencer in Monitoring Splunk 09-11-2026
0 1
0
1
i0ntempest
I just upgraded Splunk to 10.4 (10.2.2 x86_64 to 10.4 arm64) on macOS, and the previously working KVStore now does no...
by i0ntempest Loves-to-Learn Lots in Deployment Architecture 09-07-2026
0 9
0
9
ahartge
I have noticed something odd in a SHC deployment. Im consistently seeing "SHCMasterArtifactHandler - failed on handle...
by ahartge Path Finder in Deployment Architecture 09-06-2026
2 4
2
4
sirpatrick
I see some very specific requirements for the latest major version of this TA for Splunk Cloud and Splunk Enterprise....
by sirpatrick Explorer in Getting Data In 09-03-2026
0 2
0
2
ChrisHms
Hello,In a splunk search, the first transforming command is processed on the indexers and processed data is transfere...
by ChrisHms Observer in Deployment Architecture 09-02-2026
0 3
0
3
kbroeker
Hi, in our deployment pipeline we want to check the config of an app. At the moment I try to parse the default.meta ...
by kbroeker New Member in Deployment Architecture 09-02-2026
0 2
0
2
mcqueen9
Hello,I'm trying to configure the PureStorage Unified addon, and keep getting the Something went wrong errorAddon:htt...
by mcqueen9 Engager in Installation 09-01-2026
0 1
0
1
sumitmove
We want to send custom logs from Wordpress Website to Splunk account. We already have a Splunk account. We tried with...
by sumitmove New Member in Getting Data In 08-30-2026
0 3
0
3
viewpost_rgora
I am trying to install my Dev License to my local Splunk Instance but am getting the following error. Splunk.License:...
by viewpost_rgora Explorer in Installation 08-29-2026
4 16
4
16
Alan_Chan
“After upgrading Splunk to 10.2, the apps are no longer usable. May I know if there are any methods to collect PRTG l...
by Alan_Chan Explorer in Monitoring Splunk 08-27-2026
0 1
0
1
desaye
Hi Everyone,I have an existing F5 integration using Splunk Add-on for F5 BIG-IP configured to send Syslog and ASM log...
by desaye Engager in Knowledge Management 08-27-2026
1 2
1
2
prad87
I am trying to setup a new cluster with smartstore to an S3 compliant DELL storage and failing. The configuration is ...
by prad87 Explorer in Getting Data In 08-27-2026
0 2
0
2
ak_sky
Could someone confirm the expected outcome for the following settings: outputs.conf [tcpout:group1] server = 192.168...
by ak_sky Engager in Getting Data In 08-26-2026
1 7
1
7
amirahmed
Hi Splunk Team,We are planning to integrate Informatica IDMC logs with Splunk using Informatica's public REST APIs.Co...
by amirahmed Engager in Getting Data In 08-22-2026
1 3
1
3
MandarinDefense
Hello, I enabled the app SailPoint Identity Security Cloud AuditEvent but I'd like to ingest older event. There is no...
by MandarinDefense New Member in Monitoring Splunk 08-22-2026
0 1
0
1
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors