Splunk Administration

Splunk Administration
Category Activity
zksvc
Hi Everyone, I encountered an error while ingesting sourcetype=aws:cloudtrails in AWS Apps. I attempted to ingest dat...
by zksvc Contributor in Deployment Architecture 06-11-2025
0 3
0
3
SN1
we have a index where the data is currently being stored and indexed on the indexer . Now i am making Search head sta...
by SN1 Path Finder in Installation 06-10-2025
0 7
0
7
minhvt
After upgrade from 9.1.0 to 9.2.1, my heavy forwarder has many following lines in log: 04-01-2024 08:56:16.812 +0700 ...
by minhvt Loves-to-Learn in Installation 06-10-2025
0 5
0
5
mcfly227
I recently had a AD machine which had a UF on it decommissioned. I have alerts setup for missing Forwarders as well. ...
by mcfly227 Engager in Getting Data In 06-10-2025
0 3
0
3
kamermans
I have Splunk 6 Enterprise installed on a system with 2x 10-core 3GHz Xeons, 128GB RAM and a 6x SSD RAID-10. When I ...
by kamermans Path Finder in Monitoring Splunk 06-09-2025
2 14
2
14
tech_g706
Hi,I am experiencing issue with  SA-ldapsearch TA.  I am using this search to validate the timestampindex = <index na...
by tech_g706 Path Finder in Getting Data In 06-09-2025
0 4
0
4
ayomotukoya
Hi all. Having an issue with hostname override for snmp logs. An issue I’m having is i created this props and transfo...
by ayomotukoya Explorer in Getting Data In 06-07-2025
0 3
0
3
lrader
Hello, I am Looking for details of anyone that has successfully setup a enterprise search head cluster that is behind...
by lrader Observer in Deployment Architecture 06-05-2025
0 1
0
1
Sidpet
Hi I have created a playbook and am trying to run it from an event. But the playbook does not populate when I click o...
by Sidpet Loves-to-Learn in Deployment Architecture 06-05-2025
0 1
0
1
gitau_gm
Good day team. Getting this error. That is date corresponds to the last day the host was seen.05-28-2025 11:51:03.469...
by gitau_gm Explorer in Getting Data In 06-05-2025
0 3
0
3
megha_04
Is there a way to detect unused indexes in Splunk via a query? Also, how can we control the growth of log sizes effec...
by megha_04 New Member in Monitoring Splunk 06-05-2025
0 3
0
3
Real_captain
Hi Team Can you please let me know why i am not able fetch the base_date in the dashoard using the below logic. Pleas...
by Real_captain Path Finder in Monitoring Splunk 06-05-2025
0 3
0
3
splunklearner
Few event logs are getting truncated while others are getting perfectly. We are using akamai add-on to pull logs to S...
by splunklearner Communicator in Getting Data In 06-05-2025
0 2
0
2
saasuser
I am trying out Splunk Cloud and I want to set up an HTTP Event Collector. The instructions here to set up the HEC UR...
by saasuser Engager in Getting Data In 06-04-2025
0 16
0
16
Sidpet
I have playbook that validates a url given and assigns scores to it. I am able to run the playbook successfully but d...
by Sidpet Loves-to-Learn in Deployment Architecture 06-04-2025
0 3
0
3
_KD
The splunk universal forwarder image currently is not compatible with OpenShift. The image architecture requires the ...
by _KD Engager in Deployment Architecture 06-04-2025
0 2
0
2
Abhirup89
Hi , I have my Proofpoint servers over my side. I want the logs to be ingested into Splunk. How can i proceed ?
by Abhirup89 Explorer in Getting Data In 06-04-2025
0 4
0
4
fatsug
Today I noticed that one of the heavy forwarders in our distributed environment was not calling back to the deploymen...
by fatsug Builder in Getting Data In 06-03-2025
0 11
0
11
danielbb
We're using the Tenable Add-on for Splunk (TA-tenable) to ingest data from Tenable.io. the app's props.conf, has the ...
by danielbb Motivator in Getting Data In 06-03-2025
0 6
0
6
gavinmckay
Hi folks, Splunk Enterprise 6.5.3 installer on Windows Server 2012 R2, fully patched OS as of 16-4-2017. Trying to ...
by gavinmckay New Member in Installation 06-03-2025
0 12
0
12
bmacias84
Hello I am unable to configure targetRepositoryLocation in serverclass.conf. Only seems o work in global. Is anyone...
by bmacias84 Champion in Deployment Architecture 06-03-2025
0 7
0
7
hv64
Hello,im on splunk enterprise Im facing with this error on my Dashboard :Failed to load source for JointJS Diagram vi...
by hv64 Explorer in Getting Data In 06-02-2025
0 2
0
2
grca
Are there any licencing concerns to be considered for the integration between SPlunk and Databricks using the Plugin ...
by grca New Member in Getting Data In 06-02-2025
0 1
0
1
mohsplunking
Hello Splunkers,I have a question around Splunk Architecture, would greatly appreciate the inputs from Architects.In ...
by mohsplunking Path Finder in Deployment Architecture 06-01-2025
0 2
0
2
RdomSplunkUser7
In the documentation <https://help.splunk.com/en/splunk-enterprise/manage-knowledge-objects/knowledge-management-manu...
by RdomSplunkUser7 Explorer in Getting Data In 06-01-2025
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...
Top Karma Authors