Splunk Administration

Splunk Administration
Category Activity
0xAli
Hi Everyone,I hope all is well.As Splunk consultant, how can you estimate the required hardware specs such as CPU and...
by 0xAli Path Finder in Deployment Architecture 08-07-2026
0 6
0
6
0xAli
Dears,I hope all is well.As per the below:https://help.splunk.com/en/data-management/manage-splunk-enterprise-indexer...
by 0xAli Path Finder in Deployment Architecture 08-05-2026
0 2
0
2
_joe
Is it possible to ingest Meet logs with this app? That is a totally different table that Chat in BigQuery.
by _joe Contributor in Getting Data In 08-04-2026
0 0
0
0
Chiranjeev88
Hi All, I am planning to implement SmartStore in my current splunk environment and wanted to know if i am only doing ...
by Chiranjeev88 Explorer in Deployment Architecture 08-04-2026
0 6
0
6
0xAli
Hi,As per the below the Splunk Linux UF installation isn't single command as Splunk MS UF, and the customer doen't ha...
by 0xAli Path Finder in Getting Data In 08-03-2026
0 4
0
4
CHIBUIKEM
Hello Everyone,  please for the past four weeks I have been struggling with ensuring that the Universal splunk Forwar...
by CHIBUIKEM Engager in Getting Data In 08-02-2026
0 5
0
5
0xAli
Dear All,Just to confirm the below"UFs call the Deployment server and ask for their apps, the deployment server never...
by 0xAli Path Finder in Deployment Architecture 08-01-2026
1 9
1
9
jaracan
Hi,Seems like this link below is no longer working.https://splunk-sizing.appspot.com/ Does Splunk have online splunk ...
by jaracan Communicator in Deployment Architecture 07-31-2026
0 5
0
5
chimbudp
Could not able to access Splunkweb. ERROR : 503 Service unavailable The splunkd daemon cannot be reached by splunkweb...
by chimbudp Contributor in Monitoring Splunk 07-30-2026
1 8
1
8
TheBravoSierra
Splunk Universal Forwarder - Route wineventlog to one output group and _internal to anotherI'm trying to configure a ...
by TheBravoSierra Path Finder in Getting Data In 07-30-2026
0 5
0
5
erikwie
Enviroment:Distributed Splunk Enterprise 9.4.x running on Linux UFs sends data to 2 HFs S2S loadbalansingHF sends log...
by erikwie Path Finder in Getting Data In 07-30-2026
0 4
0
4
dm1
The documentation of this app and the issues I am facing with this app is quite shocking. Firstly, no documentation o...
by dm1 Builder in Getting Data In 07-30-2026
0 1
0
1
ws
Splunk Enterprise Version: 10.2.2Has anyone encountered an issue where the Deployment Server Agent Management page sh...
by ws Path Finder in Getting Data In 07-29-2026
0 2
0
2
_Raj
Hi Everyone,I'm building a lab to centralize Windows Event Logs before sending them to Splunk. The objective is to co...
by _Raj Path Finder in Deployment Architecture 07-27-2026
0 1
0
1
ravivasant
WARN FilesystemChangeWatcher - error getting attributes of path "C:\pagefile.sys": The process cannot access the file...
by ravivasant Engager in Getting Data In 07-23-2026
1 3
1
3
twinspop
These will be running SUSE 12. Each SSD will be 1.6TB. The systems have hardware RAID cards, but I'm tempted to go wi...
by twinspop Influencer in Getting Data In 07-23-2026
0 11
0
11
rbal_splunk
Why avoid RAID5 on SSD when using SmartStore?
by rbal_splunk Splunk Employee Splunk Employee in Deployment Architecture 07-22-2026
0 2
0
2
xamanium
We've decided to migrate our Splunk servers from Rocky Linux VM to Oracle Linux version 10 due to support issues.we h...
by xamanium Explorer in Installation 07-21-2026
0 5
0
5
Elbald97
For some time now, the class server agents on my deployment server have been in Pending status, and yet the logs are ...
by Elbald97 Explorer in Deployment Architecture 07-21-2026
0 1
0
1
Jamol_S
Hi everyone,I'm planning to upgrade a standalone Splunk Enterprise Heavy Forwarder running on Windows Server 2022.Cur...
by Jamol_S New Member in Deployment Architecture 07-20-2026
0 2
0
2
splunkreal
Hello, a quick note from support to explain how events are handled on HEC (on HF for instance) :https://help.splunk.c...
by splunkreal Influencer in Getting Data In 07-20-2026
2 8
2
8
Nrsch
If we have two separate Search Head Clusters, one dedicated to Splunk Enterprise Security (ES) and another for genera...
by Nrsch Explorer in Deployment Architecture 07-18-2026
0 4
0
4
derekmkll
I am fairly new to Splunk. I am trying to reduce ingestion size of logs that are coming from the Palo Alto Cloud conn...
by derekmkll Path Finder in Getting Data In 07-16-2026
1 1
1
1
splunkreal
Hello, is it possible in Splunk HEC from Kafka to receive raw events on HF in order to parse fields with addons?It se...
by splunkreal Influencer in Getting Data In 07-16-2026
0 5
0
5
_Raj
Hi all,I want to onboard my windows Security logs in to splunk with out installing UF is there any other way with out...
by _Raj Path Finder in Getting Data In 07-15-2026
1 5
1
5
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...
Top Karma Authors