Splunk Administration

Splunk Administration
Category Activity
Ravi1
We are experiencing consistent log duplication and data loss when the Splunk Universal Forwarder (UF) running as a He...
by Ravi1 Loves-to-Learn in Getting Data In 06-30-2025
0 1
0
1
_joe
The current Netscaler guidance is that logs should be exported via HEC. However, it seems like the app doesn't have a...
by _joe Contributor in Getting Data In 06-30-2025
0 1
0
1
Kosyay
Hello! I have logs from Domain Controller Active Directory in Splunk and try to configure monitoring of user logons ...
by Kosyay Explorer in Getting Data In 06-30-2025
0 12
0
12
hv64
Hello,im facing a problem on my Dbx connect : Cannot communicate with task server, please check your settings. DBX Se...
by hv64 Explorer in Getting Data In 06-30-2025
0 4
0
4
tanjiro_rengo
Hi guys,I am new here and I want to explore some things in splunk. I have a txt file, I uploaded it and I want to get...
by tanjiro_rengo New Member in Getting Data In 06-30-2025
0 4
0
4
kn450
Hello everyone,I have a network monitoring system that exports data via IPFIX using Forwarding Targets.I am trying to...
by kn450 Explorer in Getting Data In 06-29-2025
0 1
0
1
RAVISHANKAR
Hello,Planning to Upgrade Splunk Enterprise from version 9.2.1 to latest version 9.4.2 - So can a 9.4.2 latest versio...
by RAVISHANKAR Explorer in Installation 06-27-2025
0 3
0
3
meg
My linux logs cannot parsed in dashboard. My renderxml is setted to false 
by meg Observer in Getting Data In 06-27-2025
0 3
0
3
mbissante
Hi,I need to upgrade Splunk v.8.2.2.1 on RHEL 7.6 to Splunk v.9.4 on RHEL 9.6.I saw that Splunk 8.2 does not support ...
by mbissante Engager in Deployment Architecture 06-27-2025
0 2
0
2
Pete_
Hello,I am having issues getting data into Splunk Cloud with two new Universal forwarders.I have two existing Univers...
by Pete_ Explorer in Getting Data In 06-26-2025
0 7
0
7
untieshoe
I don't mean SharePoint activity, admin or audit logs. I mean actual data files (that will be converted later to look...
by untieshoe Path Finder in Getting Data In 06-26-2025
0 3
0
3
splunklearner
Jun 26 13:46:12 128.23.84.166 [local0.err] <131>Jun 26 13:46:12 GBSDFA1AD011HMA.systems.uk.fed ASM:f5_asm=PROD vs_na...
by splunklearner Communicator in Getting Data In 06-26-2025
0 6
0
6
danielbb
I came across in our repo a monitoring stanza for f5, which is [UDP://9514]. I wonder if there is any reason not to u...
by danielbb Motivator in Getting Data In 06-26-2025
0 3
0
3
danielbb
We would like to produce statistics about the usage of Splunk and we would like to categorize the searches by ranges,...
by danielbb Motivator in Monitoring Splunk 06-26-2025
0 3
0
3
LOP22456
Hello,I have a request from a systems manager related to SOX controls. They are requesting information around the loc...
by LOP22456 Explorer in Security 06-26-2025
0 2
0
2
L_Petch
Hello,2 questions but the second is more of a keepalived question than it is an SC4S question.First question is what ...
by L_Petch Path Finder in Deployment Architecture 06-26-2025
0 4
0
4
Runals
This information is probably located in one of the docs but didn't find it in anything I've read just now. Under norm...
by Runals Motivator in Getting Data In 06-25-2025
0 6
0
6
karn
I have a question about modify kvstore configuration in search head cluster environment. I have created kvstore with ...
by karn Path Finder in Deployment Architecture 06-25-2025
0 4
0
4
meng
I use metadata to monitor the activity status of member nodes in my cluster, but recently I discovered an exception. ...
by meng New Member in Monitoring Splunk 06-25-2025
0 2
0
2
chrisyounger
I have a data source of significant size and I want to filter a large percentage of the data on the UF so it isnt sen...
by SplunkTrust SplunkTrust in Getting Data In 06-24-2025
0 1
0
1
DarthHerm
Thought I would post here in the community as well since I have this opened with support. A couple weeks ago, another...
by DarthHerm Explorer in Getting Data In 06-24-2025
0 4
0
4
_pravin
Hi,I am using mcollect to collect data from certain metrics into another metric index. I have created the new metric ...
by _pravin Contributor in Getting Data In 06-24-2025
0 4
0
4
LOP22456
Hello,We have multiple fortigate devices forwarding to a logstash server that is storing all the device's logs in 1 f...
by LOP22456 Explorer in Getting Data In 06-24-2025
0 5
0
5
sdiaz5796
We have a stand-alone splunk instance in a closed area. We had to roll back the server to a snapshot and now the clie...
by sdiaz5796 Loves-to-Learn Lots in Deployment Architecture 06-23-2025
0 5
0
5
yash_eng
Hey mates, I'm new to Splunk and while ingesting the data from my local machine to Splunk this message shows up."The ...
by yash_eng New Member in Getting Data In 06-23-2025
0 3
0
3
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors