Splunk Administration

Splunk Administration
Category Activity
Jamol_S
Hi everyone,I'm planning to upgrade a standalone Splunk Enterprise Heavy Forwarder running on Windows Server 2022.Cur...
by Jamol_S New Member in Deployment Architecture 07-20-2026
0 2
0
2
splunkreal
Hello, a quick note from support to explain how events are handled on HEC (on HF for instance) :https://help.splunk.c...
by splunkreal Influencer in Getting Data In 07-20-2026
2 8
2
8
Nrsch
If we have two separate Search Head Clusters, one dedicated to Splunk Enterprise Security (ES) and another for genera...
by Nrsch Explorer in Deployment Architecture 07-18-2026
0 4
0
4
derekmkll
I am fairly new to Splunk. I am trying to reduce ingestion size of logs that are coming from the Palo Alto Cloud conn...
by derekmkll Path Finder in Getting Data In 07-16-2026
1 1
1
1
splunkreal
Hello, is it possible in Splunk HEC from Kafka to receive raw events on HF in order to parse fields with addons?It se...
by splunkreal Influencer in Getting Data In 07-16-2026
0 5
0
5
_Raj
Hi all,I want to onboard my windows Security logs in to splunk with out installing UF is there any other way with out...
by _Raj Path Finder in Getting Data In 07-15-2026
1 5
1
5
briancronrath
Ran into some issues upgrading our lab splunk environment and now I am concerned and hesitant to upgrade our prod clu...
by briancronrath Contributor in Deployment Architecture 07-13-2026
0 1
0
1
renie
I'm looking for a way to perform a full import of data from ServiceNow every day.Currently, I'm using the Splunk Add-...
by renie New Member in Getting Data In 07-11-2026
0 2
0
2
maverick
I intend to install Splunk as a forwarder on my Windows boxes, but I only want Splunk to monitor for the very latest,...
by maverick Splunk Employee Splunk Employee in Getting Data In 07-10-2026
4 6
4
6
AceX
How to integrate Microsoft Exchange on Splunk without installing  a universal forwarder that hon the Exchange Server ...
by AceX Path Finder in Getting Data In 07-10-2026
1 11
1
11
cdCryptoMetrics
Splunk Cloud---> It doesn't look like Splunk Cloud have the "Forwarding and receiving" (Setting---->Data----->Forward...
by cdCryptoMetrics Engager in Getting Data In 07-08-2026
0 5
0
5
spl_aficionado
One of our clients is asking for a fresh integration with Global Relay as a replacement for ZL Archive, how do I go a...
by spl_aficionado Path Finder in Getting Data In 07-08-2026
0 3
0
3
avoelk
Hello!I try onboarding several Trend Micro Cloud Applications like Apex One as a Service but it just doesn't work. On...
by avoelk Communicator in Getting Data In 07-08-2026
0 1
0
1
jcanoy24
Good morning everyone, first time poster and very much a novice Splunk user.My colleague is currently having an issue...
by jcanoy24 New Member in Getting Data In 07-08-2026
0 3
0
3
USA69
https://splunkbase.splunk.com/app/2934 is it compatible with Splunk enterprise & ES 10.0.4 even though it's archived....
by USA69 Path Finder in Getting Data In 07-06-2026
0 7
0
7
e_v_m
Hi all,I'd like to convert an existing, on prem, heavy forwarder to send it's data to a Cloud instance of Splunk usin...
by e_v_m Observer in Getting Data In 07-03-2026
0 6
0
6
Balshore
ERROR TcpOutputFd [TcpOutEloop] - Read error. An existing connection was forcibly closed by the remote host.I have th...
by Balshore Loves-to-Learn Lots in Monitoring Splunk 07-03-2026
0 6
0
6
sri2splunk
1) What are the prerequisites and requirements for upgrading Splunk Universal Forwarder?2) We would appreciate it if ...
by sri2splunk Explorer in Getting Data In 07-03-2026
1 2
1
2
ankit13
Hii everyone,I have installed Splunk uf 10.0.5 on windows server 2016. The UF needs to connected to DS whose version ...
by ankit13 Loves-to-Learn Lots in Getting Data In 07-01-2026
0 9
0
9
Josef
It would be great if you could extend the app with an input function. This would allow us to continuously retrieve da...
by Josef Engager in Getting Data In 06-29-2026
0 1
0
1
jeremieQuiviger
Hello, I recently had to deploy a Heavy Forwarder in my infrastructure in order to perform transformations using a cu...
by jeremieQuiviger New Member in Getting Data In 06-27-2026
0 3
0
3
sonaralt
Hi community, I am using a Splunk Universal Forwarder (UF) to monitor a specific directory on our server. I need to a...
by sonaralt Engager in Getting Data In 06-27-2026
0 18
0
18
hrawat
Forwarder applies backoff setting (default 300 sec) based on following default settings ####### # Backoff Settings Wh...
by hrawat Splunk Employee Splunk Employee in Getting Data In 06-26-2026
2 2
2
2
JohnEGones
Hi folks, Just a hopefully quick and basic question, I read the following two docs but I am still not quite clear on ...
by JohnEGones Communicator in Monitoring Splunk 06-25-2026
0 3
0
3
709_miner
I have 2 heavy forwarder on-prem and one of the HF says license is expired.  I don't have a LM. I have a hybrid syste...
by 709_miner Loves-to-Learn Everything in Getting Data In 06-25-2026
0 3
0
3
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...
Top Karma Authors