Splunk Administration

Splunk Administration
Category Activity
jamie1
Hi There,I have noticed that the cloud monitoring console is reporting a critical bucket. I only have one and have at...
by jamie1 Communicator in Getting Data In 04-15-2025
0 3
0
3
blanky
We are collecting various data from security equipment.The data is being stored in index=sec_A and received as sourty...
by blanky Explorer in Getting Data In 04-15-2025
0 3
0
3
beriwalnishant
Hello Experts, I am trying to work on setting up panels with two different queries output based on a filter. I am usi...
by beriwalnishant Path Finder in Security 04-15-2025
0 13
0
13
mshakeb
We have noticed that some Windows Domain Controller server event logs are not appearing in the Splunk search.For exam...
by mshakeb Loves-to-Learn Everything in Monitoring Splunk 04-14-2025
0 2
0
2
smith_
Hi,Splunk hasn't captured the 4743 events, indicating computer account deletions that occurred yesterday at 2 pm. Whe...
by smith_ Builder in Monitoring Splunk 04-14-2025
0 11
0
11
Gururaj1
Getting error while downloading forwarder in  Ubuntu, 20.04 LTS, amd64 focal image built on 2025-04-08Reinstalled, tr...
by Gururaj1 Explorer in Security 04-14-2025
1 8
1
8
sideview
I'm trying to piece things together from the restmap.conf docs, to get a working custom endpoint that I can use. Not...
by SplunkTrust SplunkTrust in Getting Data In 04-14-2025
3 4
3
4
tech_g706
Hi,We have some Windows 2008 R2 machines where UF 7.2 is running, and in Splunk Cloud CMC, we are getting the forward...
by tech_g706 Path Finder in Installation 04-14-2025
0 3
0
3
tech_g706
Hi,I have a question on Netskope onboarding to Splunk. I installed to TA-NetSkopeAppForSplunk (4.1.0) on Splunk cloud...
by tech_g706 Path Finder in Getting Data In 04-14-2025
0 2
0
2
okana
Expert advice needed.I was able to ingest cloudwatch logs for ecs and lambda with data managerNow i need to add tags ...
by okana Loves-to-Learn Lots in Getting Data In 04-14-2025
0 2
0
2
Bo3432
Hello, I have created splunk AWS  Linux instance Instance and installed splunk enterprise on it. The install was succ...
by Bo3432 Explorer in Security 04-11-2025
0 7
0
7
splunklearner
How can we pull Azure event hub logs to Splunk? I check that we cannot use HEC configuration for pulling the data. Wh...
by splunklearner Communicator in Getting Data In 04-11-2025
0 6
0
6
gerrysr6
I have written and tested some rules using "Ingest Actions". I used the "Sample" indexed data and everything seems fi...
by gerrysr6 Explorer in Getting Data In 04-11-2025
0 5
0
5
danielbb
I created a KV Store lookup using the "Splunk App for Lookup File Editing" app, however when I look at Settings>Looku...
by danielbb Motivator in Getting Data In 04-11-2025
0 4
0
4
hrawat
Are you recommending enableOldS2SProtocol=true?Are you implementing  enableOldS2SProtocol=true?If yes, read below.Spl...
by hrawat Splunk Employee Splunk Employee in Monitoring Splunk 04-11-2025
4 3
4
3
hrawat
9.1.3/9.2.1 onwards slow indexer/receiver detection capability is fully functional now (SPL-248188, SPL-248140). http...
by hrawat Splunk Employee Splunk Employee in Knowledge Management 04-11-2025
4 12
4
12
b17gunnr
Hello folks,My organization is struggling with ingesting the Cisco Firepower audit (sys)logs into Splunk, we've been ...
by b17gunnr Path Finder in Getting Data In 04-11-2025
0 3
0
3
SplunkHead10
Hi Community,after installing Splunk everything seemed to work.But after searching for Splunk Apps i get the followin...
by SplunkHead10 Explorer in Installation 04-10-2025
0 3
0
3
samuel-devops
 Commands used to run docker image: docker run -d -p 9997:9997 -p 8080:8080 -p 8089:8089 -e "SPLUNK_START_ARGS=--acce...
by samuel-devops Explorer in Getting Data In 04-10-2025
1 15
1
15
whitefang1726
Hello Guys,I have an existing deployment server and I'm reviewing the average network bandwidth of the server. That c...
by whitefang1726 Path Finder in Deployment Architecture 04-10-2025
0 6
0
6
cdo_splunk
The splunk.secret file is located in the $SPLUNK_HOME/etc/auth directory. It is used to encrypt and decrypt the pass...
by cdo_splunk Splunk Employee Splunk Employee in Knowledge Management 04-10-2025
17 6
17
6
Ashwini008
We have distributed environment with 4 Splunk Indexers which are consuming high memory . It reaches to 100% and remai...
by Ashwini008 Builder in Monitoring Splunk 04-10-2025
0 6
0
6
jni
Hi,We're setting up a Splunk enterprise instance in an air-gapped environment. In addition to this, the server is sit...
by jni Explorer in Getting Data In 04-10-2025
0 7
0
7
man03359
Hi,I am a splunk admin and we are re-assigning the orphaned knowledge object to my name as a temporary solution. I ne...
by man03359 Communicator in Getting Data In 04-10-2025
0 1
0
1
splunklearner
AWS logs to SplunkWe need to onboard AWS cloud watch logs (from Kinesis) to our Splunk. We have all our Splunk instan...
by splunklearner Communicator in Getting Data In 04-09-2025
0 10
0
10
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors