Splunk Administration

Splunk Administration
Category Activity
pmerlin1
Since I migrated splunk to version 9.2.4, I've been getting a lot of error messages from all Splunk servers :WARN Use...
by pmerlin1 Path Finder in Monitoring Splunk 09-15-2025
1 4
1
4
martinb
Hi all,I'm new to Splunk and have been thrown in at the deep end, so apologies if this is the wrong place or a basic ...
by martinb Loves-to-Learn in Knowledge Management 09-15-2025
0 7
0
7
vincentwhn
Due to privacy concerns, I would like to modify the _raw content during the data onboarding phase in order to impleme...
by vincentwhn Engager in Getting Data In 09-15-2025
0 7
0
7
Ghostoverflow25
I have a source of logs that I want to ingest into splunk, where each line documents a seperate event. After having s...
by Ghostoverflow25 Engager in Getting Data In 09-14-2025
0 1
0
1
jackbenimble
What would it take to use something like REST API to pull down documents from Splunk Documentation website? The searc...
by jackbenimble New Member in Getting Data In 09-12-2025
0 1
0
1
hrawat
Apply following workaround in default-mode.confAdditionally you can also push this change via DS push across thousand...
by hrawat Splunk Employee Splunk Employee in Getting Data In 09-12-2025
4 17
4
17
JyPl4wNYu7GV1uL
CentOS 7.7.1908, Splunk  v9.1.0.2I want to get an example event for each sourcetype on each host (excluding one host)...
by JyPl4wNYu7GV1uL Explorer in Getting Data In 09-12-2025
0 4
0
4
kumva01
Hi All,I’m looking for an SPL query that can return the list of Tag Names along with their associated field-value pai...
by kumva01 Loves-to-Learn Lots in Getting Data In 09-12-2025
0 2
0
2
taskmaster
I'm new to Splunk... I'm currently running Splunk on an Ubuntu system.  I've noticed that the /proc directory is show...
by taskmaster Engager in Getting Data In 09-12-2025
0 4
0
4
zksvc
Hi all,I’m trying to enable TLS on Splunk using a DigiCert certificate that I only have as a .pfx. I keep running int...
by zksvc Contributor in Security 09-12-2025
0 1
0
1
mchoudhary
I need to build an overall user activities report as in login activities, file accessed, file exported, application a...
by mchoudhary Explorer in Security 09-11-2025
0 6
0
6
AlexIta95
Good morning,I need to monitor a very long file containing data from 2021 onwards.I'm only interested in data from la...
by AlexIta95 New Member in Monitoring Splunk 09-10-2025
0 3
0
3
Nrsch
Hi, I am installing Splunk UBA 5.4.2 on my laptop in a virtual machine (RHEL 8.8) for testing. I followed the install...
by Nrsch Explorer in Getting Data In 09-10-2025
0 2
0
2
srek3502
Hi,I have a requirement to implement the Splunk Monitoring Console (DMC) in a High Availability (HA) setup. At presen...
by srek3502 Explorer in Deployment Architecture 09-10-2025
0 5
0
5
L_Petch
Hello, I am trying to get logs from my opnsense FW to go to an index called prod_opnsense but everything I have tried...
by L_Petch Path Finder in Getting Data In 09-10-2025
0 1
0
1
rk99
Hi - we have been sending data from our K8s cluster to splunk hwf which then forwards to the indexer.  It works great...
by rk99 Explorer in Getting Data In 09-10-2025
0 3
0
3
dr_juice
Is there any form of automation where we would be able to identify if one of our hosts stopped sending logs to splunk...
by dr_juice Explorer in Monitoring Splunk 09-10-2025
0 1
0
1
kramer0101
We are looking at bringing in Semperis DSP logs to evaluate them. Is there documentation on sending those logs to Spl...
by kramer0101 Engager in Getting Data In 09-09-2025
0 2
0
2
inventsekar
Hi As all my splunk projects are using LDAP for login, this issue never occurred to me. 1. if we configure splunk's l...
by SplunkTrust SplunkTrust in Security 09-09-2025
0 6
0
6
d_lim
Are we able to ingest into Splunk the config change events such as the attached image, using "Proofpoint On Demand Em...
by d_lim Path Finder in Getting Data In 09-09-2025
0 1
0
1
gcusello
Hi at all,I have to parse Juniper Switch logs that are very similar to Cisco ios.In the Juniper Add-On there isn't an...
by SplunkTrust SplunkTrust in Getting Data In 09-09-2025
0 4
0
4
sirisha
I’m currently instrumenting a .NET application to send telemetry to Splunk Observability Cloud using the Splunk Distr...
by sirisha New Member in Getting Data In 09-09-2025
0 0
0
0
Na_Kang_Lim
Hi,I am configure the apps on the UF from a Deploy Server, and get this weird behavior:What I am trying to do is assi...
by Na_Kang_Lim Path Finder in Getting Data In 09-08-2025
0 3
0
3
gsiebert
Environment- Splunk Enterprise 10.0.0 (Ubuntu 24.04), single VM (indexer+SH+Stream)- splunk_app_stream 8.1.5, Splunk_...
by gsiebert New Member in Getting Data In 09-08-2025
0 0
0
0
roshanadabala
I have added a New SAML group and assigned a role which was created before with limited privileges/capabilities and a...
by roshanadabala Observer in Security 09-07-2025
0 3
0
3
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors