Splunk Administration

Splunk Administration
Category Activity
SN1
hello we are unable to receive logs from forwarders from 29 january. i checked splund.log and found this errorERROR T...
by SN1 Path Finder in Getting Data In 02-06-2025
0 4
0
4
divyakhatnar
Hi,I am trying to install Splunk version 0.116.0 in an EKS cluster but getting error in operator pod:webhook \minstru...
by divyakhatnar Observer in Deployment Architecture 02-06-2025
0 0
0
0
Sec-Bolognese
Hi - I need to be able to send copies of logs to both Splunk Cloud and an AWS Cloudwatch Log Group.  Is it possible t...
by Sec-Bolognese New Member in Getting Data In 02-05-2025
0 3
0
3
danielbb
I see multiple Tenable Apps and TAs in Splunkbase, which one should I use to get Tenable data in?   
by danielbb Motivator in Getting Data In 02-05-2025
0 3
0
3
Splunkmm
Hi, I have a token as below in my dashboard,                  <set token="mySource">replace($numSuffix$,"_","")</set>...
by Splunkmm Engager in Getting Data In 02-05-2025
0 2
0
2
tt-nexteng
1.This is $SPLUNK_HOME/etc/system/local/inputs.conf of my Indexer.[splunktcp-ssl:9997]disabled = 0[SSL]serverCert = /...
by tt-nexteng Path Finder in Security 02-05-2025
0 13
0
13
rvadde
Greetings, Are there any official AWS CFT Templates to create necessary roles, SNS/SQS Services to use Splunk Add on ...
by rvadde New Member in Getting Data In 02-05-2025
0 1
0
1
TheBravoSierra
Hello, I'm trying to utilize the TA-QualysCloudPlatform app but running into a couple of issues.   1) When I go to op...
by TheBravoSierra Path Finder in Getting Data In 02-05-2025
0 7
0
7
wadekuhl
How do I determine the server setting for my on-premise agent config trying to send data via HTTP from a Windows serv...
by wadekuhl New Member in Getting Data In 02-04-2025
0 6
0
6
Dk123
I have created a index by CLI ( script)on custom application but the index is not reflecting in Splunk gui 
by Dk123 Observer in Getting Data In 02-04-2025
0 5
0
5
ujju
I am trying to use Splunk ODBC Driver for splunk 6.0 with microsoft excel 2010 32bit version. I have installed the OD...
by ujju New Member in Installation 02-04-2025
0 5
0
5
marksheinbaum
The Monitoring Console uses metrics data provided by servers with a splunk forwarder installed. The metrics data appe...
by marksheinbaum Explorer in Monitoring Splunk 02-04-2025
0 2
0
2
shocko
Using Splunk Enterprise 8.2.4 on Windows and trying to configure my forwarders to use SSL to forward events to my ind...
by shocko Contributor in Getting Data In 02-04-2025
0 3
0
3
mooree
We recently moved our windows event log service up to Windows 2016 and Splunk 9.0.1 and all Security Auditing events ...
by mooree Path Finder in Getting Data In 02-04-2025
0 1
0
1
anandhalagaras1
For one of our SQL server running with UF version 9.1.1 I can see a lot of error reporting with event code=4506 with ...
by anandhalagaras1 Contributor in Getting Data In 02-04-2025
0 3
0
3
fahimeh
Hello,Some of the logs coming from the Windows Universal Forwarder to Splunk show the following error in the message ...
by fahimeh Explorer in Getting Data In 02-04-2025
0 7
0
7
mgaraventa_splu
Since a while the Message field of my Windows security event logs is not extracted properly and in Splunk I see the M...
by mgaraventa_splu Splunk Employee Splunk Employee in Getting Data In 02-04-2025
11 13
11
13
Dikshi
failed to start kv store process. see mongod.log and splunkd.log for details.@Splunk
by Dikshi Loves-to-Learn Lots in Monitoring Splunk 02-04-2025
0 2
0
2
narenpg
We have currently configured to send the logs to splunk cloud also we are setting up a DR on-perm server, now the que...
by narenpg Explorer in Security 02-03-2025
0 4
0
4
hexx
In server.conf.spec, it is indicated that requireClientCert = true can be set to require HTTPS clients connecting to ...
by hexx Splunk Employee Splunk Employee in Security 02-03-2025
2 8
2
8
wegscd
I'm working on doing some data cloning. As a first step, outputs.conf (on a virgin 6.4.1 universal forwarder on Wind...
by wegscd Contributor in Getting Data In 02-03-2025
1 8
1
8
Mani2
Hi,I wanted to check that how can I get total data transfer from on-prem heavy forwarders and intermediate forwarders...
by Mani2 Explorer in Getting Data In 02-03-2025
0 4
0
4
Amith55555
Hey, i have a problem with event breaking. My app outputs logs that starts with date and time in the format 15/05/202...
by Amith55555 Explorer in Getting Data In 02-03-2025
0 5
0
5
Nawab
Hi, I am trying to configure UF installed on windows machines to send logs to HF and then HF to forward these logs to...
by Nawab Communicator in Getting Data In 02-03-2025
0 4
0
4
_joe
Hello all,I am wondering if anyone has run into an issue where they receive a "500 error" on some large reports (smal...
by _joe Contributor in Getting Data In 02-03-2025
0 0
0
0
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors