Splunk Administration

Splunk Administration
Category Activity
Alejandro2
I have an error doing my course in Splunk: This application domain (https://education.splunk.com) is not authorized t...
by Alejandro2 New Member in Installation 02-22-2025
0 2
0
2
swlf
Hi! This is my first time using Splunk and I am on the free tiral version. I setup an HEC token and ran a test on Win...
by swlf Explorer in Getting Data In 02-21-2025
0 5
0
5
shashank9
Hi Everyone,I've installed and configured a Splunk Heavy Forwarder on an EC2 instance in AWS and configured two Splun...
by shashank9 Explorer in Getting Data In 02-21-2025
0 5
0
5
Karthikeya
This is how our normal raw event looks --Feb 7 23:59:32 128.160.82.26 [local0.warning] <132>1 2025-02-07T23:59:32.033...
by Karthikeya Communicator in Getting Data In 02-21-2025
0 6
0
6
ww9rivers
Splunk seems to have a problem with authenticating a SAML user account using a token.The purpose of using token authe...
by ww9rivers Contributor in Security 02-21-2025
0 4
0
4
boknows
Hello, I am trying to replace the host value that is the UF with event data as the value.  ACME-001 PROD-MFS-003: sta...
by boknows Explorer in Getting Data In 02-21-2025
0 2
0
2
splunklearner
currently we are on-boarded applications like 1,2,3,4..... 100 into default search and reporting app.But we they belo...
by splunklearner Communicator in Getting Data In 02-21-2025
0 3
0
3
Nicolas2203
Hello,My use case :Context : On azure, datas from several applications are pushed in a Azure EventHubI need to separa...
by Nicolas2203 Path Finder in Getting Data In 02-21-2025
0 2
0
2
cpraz_ord
Hi...I believe Splunk Cloud has 3 indexers, what about Search Heads? If there multiple Search Heads, does the ES app...
by cpraz_ord Explorer in Deployment Architecture 02-21-2025
1 4
1
4
Ciccius
Hi all,I have configured a new script in 'Data inputs' to feed my index with data from a Rest API.The script has been...
by Ciccius Explorer in Getting Data In 02-21-2025
0 5
0
5
SN1
so i copied enterprise security app folder from old sh to new but it is showing macro error not found where i can fin...
by SN1 Path Finder in Installation 02-20-2025
0 4
0
4
dhavamanis
Need your help, Can you please tell us, how to find daily indexed data size by each index?
by dhavamanis Builder in Getting Data In 02-20-2025
1 5
1
5
SN1
OK so we have 2 search heads and we want to migrate enterprise security app from 1 search head to another . How shoul...
by SN1 Path Finder in Installation 02-20-2025
0 6
0
6
Skv
right now we have a online soultion in the central observability otel collector send to splunk now im looking for the...
by Skv Loves-to-Learn in Deployment Architecture 02-19-2025
0 0
0
0
zksvc
Hi Everyone, In my Splunk environment, I have about 15 users, but the one responsible for creating correlation search...
by zksvc Contributor in Getting Data In 02-19-2025
0 4
0
4
Karthikeya
We have a requirement to remove few strings from the events while indexing the data. Here is my raw event sample -  {...
by Karthikeya Communicator in Getting Data In 02-19-2025
0 1
0
1
splunklearner
I want to extract value from the following field while indexing the data to use it to map it with index.vs_name=v-jup...
by splunklearner Communicator in Getting Data In 02-19-2025
0 3
0
3
Karthikeya
We have a requirement to exclude or remove few fields from the event we receive it in Splunk. Already we have extract...
by Karthikeya Communicator in Getting Data In 02-19-2025
0 8
0
8
Praz_123
How can I export the host values in excel for the particular serverclass Is there is any query for that that will be ...
by Praz_123 Communicator in Monitoring Splunk 02-18-2025
0 1
0
1
Sultan77
Good day everyone.I am trying to monitor the environment hosts whether if any stopped sending logs.The challenge here...
by Sultan77 Loves-to-Learn Lots in Monitoring Splunk 02-18-2025
0 4
0
4
Wiessiet
I recently had cause to ingest Oracle Unified Directory logs in ODL format. I'm performing pretty simple file-based i...
by Wiessiet Path Finder in Getting Data In 02-18-2025
1 2
1
2
ws
Hi,I’m currently encountering the following error message in `splunkd.log` when I enable the custom TA Add-on.I have ...
by ws Path Finder in Getting Data In 02-18-2025
0 4
0
4
splunklearner
We have two syslog standalone servers (both are active) (one named as primary and the other is contingency) with UF i...
by splunklearner Communicator in Deployment Architecture 02-17-2025
0 8
0
8
ramshan
Getting below error after executing below command ./splunk start --accept-license --answer-yesIt seems that the Splun...
by ramshan New Member in Getting Data In 02-17-2025
0 2
0
2
Real_captain
HI Can someone please let me know how to open different web URLs by clicking on different rows of a dashboard using d...
by Real_captain Path Finder in Getting Data In 02-17-2025
0 1
0
1
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors