Splunk Administration

Splunk Administration
Category Activity
cbiraris
Hi team,i have a index with 4 sourcetype.  index has searchable retention of 4 months.is there any way we can keep sa...
by cbiraris Path Finder in Getting Data In 03-27-2025
0 5
0
5
nieminej
We have clustered Deployment Servers (with NFS shared drive) because we have total of clients tens of thousands at th...
by nieminej Loves-to-Learn Lots in Deployment Architecture 03-26-2025
0 3
0
3
mkhasan
We had a problem with our Microsoft Azure plugin since July. The field appliedConditionalAccessPolicies: [ [ - ] ] mi...
by mkhasan New Member in Getting Data In 03-26-2025
0 1
0
1
briancronrath
Lately our searchheads will run into issues where the srtemp folder baloons to 80+GB and fills the local hard drive. ...
by briancronrath Contributor in Monitoring Splunk 03-26-2025
0 1
0
1
dania_abujuma
Hello Splunkers!I am looking for a way to collect the SunOS-SPARC OS logs. After some research, I have tried to updat...
by dania_abujuma Explorer in Deployment Architecture 03-26-2025
0 2
0
2
Avantika
I have below configurations in transforms and props config files to change the source name of my events from upd:9514...
by Avantika Explorer in Getting Data In 03-25-2025
0 9
0
9
nachi
Hi,We have a single splunk instance(Linux) hosted in AWS. The current version is Splunk entrprise 7.3.0 and we would ...
by nachi New Member in Installation 03-25-2025
0 13
0
13
kermitshort
I'm setting up a Splunk Indexer (Splunk Enterprise 6.4.1) on CentOS 6.8 64-bit. I do have the Splunk Add-on for Micr...
by kermitshort Explorer in Getting Data In 03-25-2025
0 14
0
14
sureshkumaar
traffic events not getting routed to nw_fortigate and non-traffic events not getting routed to os_linuxCan someone he...
by sureshkumaar Path Finder in Getting Data In 03-24-2025
0 7
0
7
avi123
Hi All,I have a splunk alert that is having this search query:index="dcn_b2b_use_case_analytics" sourcetype=lime_proc...
by avi123 Explorer in Getting Data In 03-24-2025
0 5
0
5
ayomotukoya
Where can I find the icons that I can use for a splunk architecture diagram?
by ayomotukoya Explorer in Deployment Architecture 03-24-2025
0 3
0
3
vicky05ssr
Hello I need a small clarification over distsearch.conf. As per the documentation, to connect the SH with Indexer. ...
by vicky05ssr Explorer in Knowledge Management 03-24-2025
0 3
0
3
Fr3nchee
Hello all,So I'm very new to Splunk, like I've been playing around with it for less than 3 months.  I have been taske...
by Fr3nchee Engager in Getting Data In 03-24-2025
0 4
0
4
fatsug
Without a tiered storage model it seems like there would be little argument for using cold/frozen storage. Except pot...
by fatsug Builder in Deployment Architecture 03-24-2025
0 7
0
7
Nikolozts
hello, Please write or send me document link which internet endpoints (URL, port) Splunk SIEM needs access to in orde...
by Nikolozts Explorer in Security 03-22-2025
0 3
0
3
SplunkSN
Hi All,We have requirement to onboard the Infrastructure metrics (CPU, Memory and Disk ) monitored using Appdyanics t...
by SplunkSN Loves-to-Learn Everything in Getting Data In 03-21-2025
0 1
0
1
Gryphus
I have 2 indexers in a cluster. One is down and one is up. All buckets are there on the indexer that is up but still ...
by Gryphus Observer in Deployment Architecture 03-20-2025
0 6
0
6
rajindurbal
I have gotten 3 error on the search head. The errors are: Failed to start KV Store process. See mongod.log and splunk...
by rajindurbal Path Finder in Knowledge Management 03-20-2025
2 30
2
30
ed_a
Hi all, A security scan on our Splunk server has thrown up CVE-2018-11409. I've verified thatwe are affected -  I can...
by ed_a Engager in Security 03-20-2025
1 3
1
3
koshyk
hi Folks,I’m preparing to present a large-scale Splunk design to stakeholders and want to make it interactive. To ach...
by koshyk Super Champion in Deployment Architecture 03-20-2025
0 4
0
4
avi123
 when I run this search query in splunk search and reporting apps my output looks like this as mentioned below Search...
by avi123 Explorer in Getting Data In 03-20-2025
0 2
0
2
tomapatan
Hi,I`m trying to make an API request from my local machine to our Splunk Cloud instance, without much success.Checked...
by tomapatan Contributor in Security 03-19-2025
0 3
0
3
Germaine1989
We get these messages. For exmaple dbconnect doesn't work anymore... how could i solve this?03-11-2025 12:09:07.792 +...
by Germaine1989 Engager in Monitoring Splunk 03-19-2025
0 7
0
7
KKuser
How can I leverage Splunk Cloud to:Monitor System Health & Performance – Track uptime, downtime, and resource utiliza...
by KKuser Path Finder in Monitoring Splunk 03-19-2025
0 2
0
2
TJLAN
Login failedYour license is expired.Please login as an administrator to update the license.
by TJLAN Observer in Installation 03-18-2025
0 9
0
9
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors