| | I am trying to implement a postfilter in Splunk Connect for Syslog to drop east-west (internal-to-internal) Fortigate... 0 0 | 0 | 0 | |
| | I've configured my splunk enterprise to get saml login with keycloak.[authentication]authSettings = samlauthType = SA... 0 1 | 0 | 1 | |
| | I have a 2 search heads in a Splunk SH cluster in the dev environment. Recently, I upgraded Splunk from 9.3.8 to 9.4.... 0 2 | 0 | 2 | |
| | We have to pull logs from Tencent COS (Cloud Object Storage) to our Splunk instances which are hosted on AWS. Tencent... 0 7 | 0 | 7 | |
| | iv just created a new account.iv have admin role assigned to my user account iv given admin role all permissions, yet... 0 2 | 0 | 2 | |
| | We recently found out that we couldn't send TCP data as Syslog because it didn't have the proper header, but streamin... 0 4 | 0 | 4 | |
| | We use HEC to ingest data from multiple sources but are starting to see the requirement for OAuth and other security ... 0 5 | 0 | 5 | |
| | We are currently configuring the DUO security MFA on Splunk Enterprise and we noticed that the local account admin ge... 0 1 | 0 | 1 | |
| | There have been reports that the February 2026 MS update kills the RPC call to the Domain Controllers for various ver... 0 1 | 0 | 1 | |
| | We are trying to ingest JSON data to Splunk Ingest Processor. Sometimes JSON data is getting ingested properly and ma... 0 1 | 0 | 1 | |
| | Hi,I'm ingesting journald logdata, and would like to exclude all rows with "apparmor=ALLOW".To me, the journald-filte... 0 7 | 0 | 7 | |
| | Hi Everyone,While using Syslog-NG to monitor network traffic and write it into file, I want to ask about the Log fil... 0 6 | 0 | 6 | |
| | As organizations increasingly adopt AI tools for automation, analytics, and decision-making, protecting sensitive dat... 0 2 | 0 | 2 | |
| | I am observing inconsistent forwarding of Windows Security Event ID 4624 (Successful Logon) from multiple Windows hos... 0 9 | 0 | 9 | |
| | Referring to this question (Not all Splunk cookies have the HttpOnly tag set) , answered by @anaidu_splunk , I can s... 0 1 | 0 | 1 | |
| | Current setup - Indexers --> F5 VIP --> CM CM is seeing the requests are coming F5 VIP rather than actual source ip o... 0 2 | 0 | 2 | |
| | In my use-case my source log (tailed by a monitor input stanza) is being archived once a day at midnight and the resu... 3 3 | 3 | 3 | |
| | Hi,I'm required to integrate the Alogsec Security Management Suite (ASMS) logs via API method to cover the richer vi... 0 3 | 0 | 3 | |
| | One of my sourcetypes is a CSV file (with CSV header)I was using this sourcetype stanza in props.conf:[foo_bar] INDEX... 0 1 | 0 | 1 | |
| | We are planning to decommission our Cribl environment and migrate all data ingestion directly back to Splunk. I am lo... 0 3 | 0 | 3 | |
| | I was wondering if any one has successfully onboard KnowBe4 data? I don't see a TA or App on Splunkbase. 0 8 | 0 | 8 | |
| | According to Splunk Validated architecture of designing HA between 2 syslog server the documentation says this --> ... 0 5 | 0 | 5 | |
| | Sample events - working in regex101 : https://regex101.com/r/LuC6ZQ/1| rex field=_raw "nsssvcip\=(?<host>\d+\.\d+\.\d... 0 4 | 0 | 4 | |
| | IHAC that has a distributed DS/LM/MC in a DMZ environment (see image). It's a new RHEL build on 10.2.2 and clients ha... 0 2 | 0 | 2 | |
| | Hi All,Has anyone tried to ingest Claude OpenTelemetry logs into Splunk? I'd be interested in understanding what appr... 0 4 | 0 | 4 | |
