Splunk Administration

Splunk Administration
Category Activity
tech_g706
Hi,I need recommendations on typo3 logs source type.Be default, I set source type as "typo3" in inputs.conf but logs ...
by tech_g706 Path Finder in Getting Data In 04-21-2025
0 3
0
3
ws
I'm looking for a way to split a JSON array into multiple events, but it keeps getting indexed as a single event.I've...
by ws Path Finder in Getting Data In 04-21-2025
0 15
0
15
branmcd
Hi all,I’m planning to deploy the Splunk Attack Range in a cloud-based lab environment, likely in AWS or Azure. I nee...
by branmcd Observer in Security 04-18-2025
0 0
0
0
siddharth1479
Hi Community, I'm trying to extract search results using REST API and I'm facing the following problem. 1. I'm using...
by siddharth1479 Path Finder in Getting Data In 04-18-2025
1 11
1
11
Bobert
I've been writing new pipelines to my Edge Processors when I discovered that no destination values are showing up for...
by Bobert Observer in Getting Data In 04-18-2025
0 0
0
0
edwardrose
Hello All I am creating an app that will have all the SSL certs and pem files in it. As part of the app I have the ...
by edwardrose Contributor in Deployment Architecture 04-17-2025
0 4
0
4
gpalau
I installed Splunk Forwarder 9.4.1 on macOS 15.4 and on first run I get a bunch of permission errors:Warning: cannot ...
by gpalau New Member in Installation 04-17-2025
0 4
0
4
tangtangtang12
I've read through some of the Splunk documentation and previously one of my colleagues already configured the "Window...
by tangtangtang12 Loves-to-Learn Lots in Getting Data In 04-17-2025
0 2
0
2
Hemant_h
We have 40 dc server sending logs to onprem indexers but i see on Deployment server i can see only on App which has o...
by Hemant_h Engager in Getting Data In 04-17-2025
0 2
0
2
dionrivera
I have 40 Windows 2012 domain controllers (forwarding through heavy forwarders to cloud), that intermittently stop se...
by dionrivera Communicator in Getting Data In 04-17-2025
0 15
0
15
sabollam
Hello All,I have log file which has the following content in json format, I would like to parse the timestamp and con...
by sabollam Loves-to-Learn Lots in Getting Data In 04-17-2025
0 11
0
11
stemerdink
As we have recently enabled various audit settings on our domain, we now have 4662 events being generated on the DCs....
by stemerdink Engager in Getting Data In 04-17-2025
0 3
0
3
jasongb
I've taken 30 minutes from my day to avoid spending over an hour modifying tag permissions, and have had no luck. I ...
by jasongb Path Finder in Security 04-16-2025
4 1
4
1
manideepa
Hello Experts,In Splunk ITSI, we’re able to see the alerts in the Alerts table, but those alerts are not being reflec...
by manideepa Engager in Getting Data In 04-16-2025
0 1
0
1
Abass42
So the title is pretty self explanatory. I have been approached and requested to trim logs. I had initially installed...
by Abass42 Communicator in Getting Data In 04-16-2025
0 5
0
5
anandhalagaras1
Based on the article provided below we have updated our Atlassian settings to pull the Bitbucket logs into our Audit ...
by anandhalagaras1 Contributor in Getting Data In 04-16-2025
0 4
0
4
blanky
We are collecting the sourtype of the data we are currently receiving by changing it as follows.[A_syslog]TRANSFORMS-...
by blanky Explorer in Getting Data In 04-16-2025
0 2
0
2
rahulhari88
Hi I have a following architecture and i am trying to setup my Search head cluster .i have multiple questions , if i ...
by rahulhari88 Explorer in Deployment Architecture 04-16-2025
0 14
0
14
Karthikeya
We have a architecture of 3 site multi cluster which contains 6 indexers (2 in each site), 3 search heads (one in eac...
by Karthikeya Communicator in Getting Data In 04-16-2025
0 16
0
16
tinscore
Trying to run splunk in a docker container - which I can successfully get running.however...Once I try to add a persi...
by tinscore New Member in Installation 04-16-2025
0 1
0
1
sherwin_r
I am trying to disable the Splunk Secure Gateway app in a clustered environment. However I dont see an option to disa...
by sherwin_r Explorer in Installation 04-16-2025
0 11
0
11
lqiao
From time to time, I am getting below warning: WARN SavedSearchHistory - Can't persist saved-search history due to ...
by lqiao Explorer in Knowledge Management 04-16-2025
0 1
0
1
wni
Hello from Splunk Data Manager Team,We are excited to announce the preview of Data Manager for Splunk Cloud. Before y...
by wni Splunk Employee Splunk Employee in Getting Data In 04-16-2025
3 22
3
22
arusishere
Dear Splunk Community,I need some advice on how to get DB Connect configured. I'm hitting a brick wall trying to get ...
by arusishere New Member in Getting Data In 04-15-2025
0 4
0
4
cmutt78_2
Upon installing the Akamai SIEM I am not seeing the data input option for "Akamai​ Security Incident Event Manager AP...
by cmutt78_2 Explorer in Getting Data In 04-15-2025
0 7
0
7
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors