Splunk Administration

Splunk Administration
Category Activity
Rafaelled
Hello, I have been trying to migrate elk data to splunk, we have elk data dating back 2 years and I have attempted to...
by Rafaelled Explorer in Getting Data In 02-11-2025
0 2
0
2
Zorghost
Hello everyone,I am planning to automate a process where we need to archive admin activity for splunk application.For...
by Zorghost Loves-to-Learn in Security 02-11-2025
0 7
0
7
TheJagoff
Hello. I noticed on a U/F, "Splunk destroying TcpOutputClient during shutdown/reload" as a level INFO and happens 4 o...
by TheJagoff Communicator in Getting Data In 02-11-2025
0 2
0
2
jiaminyun
Will the index size exceed the maximum to delete data or stop writing data
by jiaminyun Path Finder in Deployment Architecture 02-10-2025
0 5
0
5
jmquilaton
Here's the context, I've created a splunk add-on app in splunk enterprise trial version and after creating it and cre...
by jmquilaton Loves-to-Learn in Getting Data In 02-10-2025
0 5
0
5
splunklearner
We have json fields to be auto extracted onto Splunk. We have some non json data to be removed and then auto extract ...
by splunklearner Communicator in Getting Data In 02-10-2025
0 5
0
5
Karthikeya
Hello,We have json data coming in Splunk and to extract that we have given| rex "(?<json>\{.*\})"| spath input=jsonNo...
by Karthikeya Communicator in Getting Data In 02-10-2025
0 24
0
24
tt-nexteng
I am configuring TLS communication between UF (Universal Forwarder) and Indexer.My outputs.conf configuration is as f...
by tt-nexteng Path Finder in Security 02-10-2025
0 7
0
7
arunkuriakose
Hi teamI have been working on assigning a custom urgency level to all notables triggered through our correlation sear...
by arunkuriakose Explorer in Getting Data In 02-10-2025
0 3
0
3
L_Petch
Hello,I want to deploy 3rd party SSL certs via an app using the deployment server as there are too many Splunk Forwar...
by L_Petch Path Finder in Getting Data In 02-10-2025
0 2
0
2
splunk_user_99
Hi Splunkers, does anyone know if I there are datasets free to download?More precisely, I would need some network tra...
by splunk_user_99 Explorer in Getting Data In 02-10-2025
0 2
0
2
Nawab
We need to integrate MSSQL standard edition with splunk, so we tried sending logs to Windows Event Viewer application...
by Nawab Communicator in Security 02-09-2025
0 5
0
5
ws
Currently using an customize App to connect to a case / monitoring system and retrieve data.I found out that, Splunk ...
by ws Path Finder in Getting Data In 02-09-2025
0 7
0
7
splunklearner
Hello all,Currently we have following event which contains both json and non json data. Please help me in removing th...
by splunklearner Communicator in Getting Data In 02-09-2025
0 16
0
16
Real_captain
HI Team Is it possible to use the inputlookup of csv file with 7 column and fill the details in those 7 columns using...
by Real_captain Path Finder in Getting Data In 02-09-2025
0 5
0
5
Nawab
We have an environment where Splunk UF sends logs to HF and mostly UFs are stuck even HF and indexers are up, we need...
by Nawab Communicator in Security 02-09-2025
0 7
0
7
erick4x4
I use Splunk to monitor a basic text file on multiple Windows Servers with the following stanza in inputs.conf:[monit...
by erick4x4 Explorer in Getting Data In 02-09-2025
0 3
0
3
rukshar
We are unable to access our splunk webserver post OS upgrade to RHEL 8.10, However our Splunk service is up and runni...
by rukshar Explorer in Installation 02-08-2025
0 12
0
12
Maries
Team,I'm trying to push Jenkins Build Logs to Splunk. Installed Splunk Plugin (1.10.1) in my Cloudbees Jenkins. Confi...
by Maries Explorer in Getting Data In 02-07-2025
0 4
0
4
splunklearner
Anytime I try to do anything with my deployment server I get this error:An error occurred: Could not create Splunk se...
by splunklearner Communicator in Getting Data In 02-07-2025
0 6
0
6
maxime_simard
Is there a way to export the ticket information from mission control with the analyst notes, and resolution ?  If it'...
by maxime_simard New Member in Security 02-07-2025
0 2
0
2
solg
We need to connect a FortiWeb Cloud with a Splunk Heavy Forwarder.It is over internet so SSL must be used.We are rece...
by solg Explorer in Getting Data In 02-07-2025
0 2
0
2
Andre_
Hello,Is it possible to configure a Universal Forwarder to automatically discover the location of weblogs for IIS or ...
by Andre_ Communicator in Getting Data In 02-07-2025
0 8
0
8
abhinav_maxonic
I add stanzas to indexes.conf and props.conf in cluster-master at location : /opt/splunk/etc/master-apps/_cluster/loc...
by abhinav_maxonic Path Finder in Deployment Architecture 02-06-2025
0 5
0
5
Nrosemommy
I noticed my iPad is getting data and I didn’t open a splunk account. How do I figure out where it is going?
by Nrosemommy Observer in Getting Data In 02-06-2025
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors