| | This is a comment rather than a question. Please add the ability to ingest audit logs in to the Dynatrace add-on. 0 1 | 0 | 1 | |
| | I am posting this to maybe save you from few hours of troubleshooting like I did.I did clean install of Splunk 9.4 in... 0 7 | 0 | 7 | |
| | The Qualys TA does not provide CIM parsing. 1 2 | 1 | 2 | |
| | I've installed the Splunk Add-On Builder but the UI is blank/won't load...I've tried installing on my HF (Heavy Forwa... 0 10 | 0 | 10 | |
| | Dears,kindly support why am I getting Invalid key in stanza [clustermaster:one] in /opt/splunk/etc/apps/org_cluster_s... 0 3 | 0 | 3 | |
| | Hello everyone, I have a splunk server installed locally and there are logs being ingested already. I'd like to forwa... 0 1 | 0 | 1 | |
| | If you have enabled splunk S2S compression, you can skip reading further. compressed = trueTLS 1.3 removed compressi... 3 4 | 3 | 4 | |
| | Here are the configs for on-prem customers willing to apply and avoid adding more hardware cost.9.4.0 and above most ... 0 6 | 0 | 6 | |
| | I'm working on a transforms.conf to extract fields from a custom log format. Here's my regex:REGEX = ^\w+\s+\d+\s+\d+... 0 3 | 0 | 3 | |
| | index=_internal [`set_local_host`] source=*license_usage.log* type="Usage" | eval h=if(len(h)=0 OR isnull(h),"(SQUAS... 0 1 | 0 | 1 | |
| | Is there a limit to how many Search Heads can be part of a Cluster? We have a fairly large deployment and I wanted t... 1 8 | 1 | 8 | |
| | Hi All, i do create new index but the source data is from savedsearch let say i create savedsearch from index=ABC the... 0 6 | 0 | 6 | |
| | Hi all,I’m extracting fields from an event using the Field Extractor with a pipe (|) delimiter for sourcetype=alert:a... 0 3 | 0 | 3 | |
| | The Content-Security-Policy (CSP) HTTP header is missing on port 8000.I do not see the Content-Security-Policy in the... 0 1 | 0 | 1 | |
| | I have already deliver the splunk remote upgrader tgz ,with depoyment server.Can i deliver a script too to automatica... 0 5 | 0 | 5 | |
| | Hello All!Trying to set up CAC Based Auth for SPLUNK 9.1.1 on Windows Server 2022 for the first time. I have successf... 1 38 | 1 | 38 | |
| | How can I clone data from a HF to two different splunk instances? Doubling defaultgroup in outputs.conf does not work... 0 4 | 0 | 4 | |
| | Can anyone give me some examples of using STOP_PROCESSING_IF in transforms.conf? Seems there is no examples exists wi... 0 6 | 0 | 6 | |
| | How can I configure my F5 BIG-IP to forward logs from a load-balanced server pool to Splunk? 0 1 | 0 | 1 | |
| | I am using self-signed certificates to connect to my search heads using SSL. After upgrading to the latest version o... 0 4 | 0 | 4 | |
| | I have a not-very-complicated query that returns a table of my roles and associated default search indexes. One role ... 0 1 | 0 | 1 | |
| | Hello,We're currently having an issue of SC4S tagging Cisco firepower data as nix:syslog, but I was having this issue... 0 2 | 0 | 2 | |
| | Hello,I wanna forward all data from a single HF to two splunk different instances. How can i do that? Thanks #splunk ... 0 10 | 0 | 10 | |
| | How can I specify all host or sources in a stanza of props.conf?Thank you @gcusello 0 3 | 0 | 3 | |
| | I'm seeing hundreds of these errors in the internal splunkd logs01-16-2025 12:05:00.584 -0600 ERROR UserManagerPro [7... 0 3 | 0 | 3 | |
