Splunk Administration

Splunk Administration
Category Activity
tsocyberoperati
Hello All,We have a Splunk Universal Forwarder 9.4.0 (then 9.4.3) installed on a Windows 2022 box to which we don't h...
by tsocyberoperati Loves-to-Learn Lots in Deployment Architecture 07-21-2025
0 5
0
5
LS1
   Hello, maybe I don't have the vocabulary to find the answer when Googling.  I only submit this question after many...
by LS1 Loves-to-Learn Lots in Getting Data In 07-21-2025
0 12
0
12
AAlhabba
Dears,       After upgraded Splunk from 9.1.2 version to 9.2.0 version, the deployment server not showing the clients...
by AAlhabba Explorer in Deployment Architecture 07-21-2025
1 29
1
29
palyogit
http event data is not received at index though in the log it says HttpInputDataHandler - handled token name=xyz How ...
by palyogit New Member in Getting Data In 07-20-2025
0 5
0
5
azer271
Hello! I'm new to Splunk Cloud. Could you please explain the difference between hot, warm, cold and thawed buckets in...
by azer271 Path Finder in Deployment Architecture 07-20-2025
0 4
0
4
thambisetty
Hi everyone, I am working on Splunk clustered environment, where i have 3 indexers,1 search head, and 1 head. Now i a...
by SplunkTrust SplunkTrust in Deployment Architecture 07-18-2025
3 13
3
13
nomaduw
I've been asked to assist another department with getting their Splunk configuration working with windows UFs. They h...
by nomaduw Loves-to-Learn in Security 07-18-2025
0 1
0
1
vulnfree
Hi Splunkers,I'm having issues ingesting Windows DNS Server Analytical logs. What's strange is that I am able to pull...
by vulnfree Explorer in Getting Data In 07-18-2025
0 1
0
1
BoscoBaracus
Good morning All,I have been trying to figure out how can I create a data input on a heavy forwarder to forward data ...
by BoscoBaracus Engager in Getting Data In 07-18-2025
0 12
0
12
ez-secops-awn
I would greatly appreciate support for customer model as a correlation search option in the VT4splunk app.
by ez-secops-awn Engager in Getting Data In 07-17-2025
0 5
0
5
MatheoCaneva1
Hi everyone!Quick question. I would like to know how can I send data to an index using a python script.We need to ing...
by MatheoCaneva1 Engager in Getting Data In 07-17-2025
0 6
0
6
dm1
I need to onboard Cisco Catalyst 8500 router logs into Splunk. When I was looking for addons, I found the below addon...
by dm1 Builder in Getting Data In 07-16-2025
0 1
0
1
Cheng2Ready
[monitor://\\njros1bva0597\d$\LogFiles\warcraft-9.0.71\logs\*] disabled = false host = NJROS1BVA0621 alwaysOpenFile =...
by Cheng2Ready Communicator in Getting Data In 07-16-2025
0 6
0
6
tbarn005
Trying to filter out all perfmon data using ingest actions. so, i try and see the samples and i get this error I chec...
by tbarn005 Engager in Getting Data In 07-16-2025
0 7
0
7
asah
Hi Splunk Gurus, I’m working on a script to programmatically check if logs from a specific host are available in Splu...
by asah Engager in Getting Data In 07-16-2025
0 2
0
2
gavsdavs
I have a list of GPS points in a lookup file which describes a race track, generated using this https://www.gpsvisual...
by gavsdavs Observer in Knowledge Management 07-16-2025
0 10
0
10
sudha_krish
I'm cloning the event and before cloning  extracting sourcetype to use later.transforms.conf [copy_original_sourcety...
by sudha_krish Explorer in Getting Data In 07-16-2025
0 5
0
5
schose
Hi all,When creating a systemd unit file for and old UF (<9.1) using "splunk enable boot-start -systemd-managed 1 -us...
by schose Builder in Deployment Architecture 07-15-2025
0 2
0
2
CAED-form
Hello(excuse me for my english it's not my native language)I upgrade splunk entreprise from 9.2.1 to 9.3.4Everything ...
by CAED-form Engager in Security 07-15-2025
0 3
0
3
elend
Currently I have setup Splunkstream, but there is a condition where I want to disable some data sources from certain ...
by elend Communicator in Getting Data In 07-15-2025
0 4
0
4
Mirza_Jaffar1
Configuring Internal Log Forwarding 1- 1sh 2 indx 2 if and 4 uf 1 mc2- I can see only idx internal logs though I have...
by Mirza_Jaffar1 Explorer in Getting Data In 07-14-2025
0 4
0
4
nickhills
I want to provide a standard Splunk user the ability to upload files via the web UI.Specifically, so that members of ...
by nickhills Ultra Champion in Getting Data In 07-14-2025
0 1
0
1
Rani2
I have created a pipeline for filtering data coming into the sourcetype = fortigate_traffic.I would like to further a...
by Rani2 Loves-to-Learn in Getting Data In 07-14-2025
0 1
0
1
youngso
Does anyone have a cheat sheet for btool to help newbies?Here is my version of btool cheat sheet: splunk btool <conf_...
by SplunkTrust SplunkTrust in Getting Data In 07-14-2025
1 8
1
8
Cole-Potter
My End Goal: I would like to be able to leverage our windows Splunk deployment server/Splunk enterprise server to rec...
by Cole-Potter Loves-to-Learn Lots in Deployment Architecture 07-14-2025
0 5
0
5
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...

Splunk Brings Proof of Control to Digital Asset Transfers

Digital assets now sit inside the core of financial services. HSBC launched its Tokenized Deposit Service in ...
Top Karma Authors