Splunk Administration

Splunk Administration
Category Activity
selyian
General question about polling frequency and licensing. Let's say I have about 4 million events in regards to pulling...
by selyian Splunk Employee Splunk Employee in Getting Data In 12-02-2025
0 0
0
0
Beerman
After upgrading to Debian 13 Journald input is not working anymore with Splunk 10.x.This error I found in the interna...
by Beerman New Member in Getting Data In 12-02-2025
0 3
0
3
Andre_
Hello,we encountered a situation today where a monitored Windows Drive disappeared from Spunk.The drive had become co...
by Andre_ Path Finder in Getting Data In 12-02-2025
0 1
0
1
Singhk1
hi All, Got a very strange issue.  DS version 9.4.5. OS rhel 8+DS is not deploying app to clients. Deploy server is e...
by Singhk1 Engager in Deployment Architecture 12-02-2025
0 2
0
2
imKaren
i want to ask one detailed question as a normal user who interacts with splunk on a daily basis without touching deve...
by imKaren New Member in Security 12-01-2025
0 1
0
1
robxzy
Hei,Getting these messages constantly: Splunk Version 9.4.0 - Running on WindowsLogFile: python.log2025-01-31 23:24:1...
by robxzy New Member in Deployment Architecture 12-01-2025
0 1
0
1
nunoaragao
Hi Splunkers,Long time ago we setup a SH cluster, and added search peers using CLISome time later we changed the setu...
by nunoaragao Path Finder in Getting Data In 12-01-2025
0 1
0
1
msmadhu
We are attempting to upgrade Splunk Universal Forwarders using the UF Remote Upgrade Add-on.As per Splunk documentati...
by msmadhu Path Finder in Deployment Architecture 12-01-2025
0 5
0
5
dantimola
Hi, Splunkers, Can someone suggest what is the best practice to integrate Citrix mcs to Splunk? Our case is, we can'...
by dantimola Communicator in Deployment Architecture 11-27-2025
0 3
0
3
ankit13
I am trying to integrate an Oracle database with Splunk using DB Connect. When I attempt to create an input in Data L...
by ankit13 New Member in Security 11-26-2025
0 1
0
1
gteccr
Hello, We have been reported that there is an open vulnerability with openssl for SplunkUniversal Forwarder, as descr...
by gteccr Explorer in Monitoring Splunk 11-26-2025
0 7
0
7
yh
Hi,I have this unusual problem where I am trying to modify the host name in my windows log (text file ingestion) in m...
by yh Path Finder in Getting Data In 11-25-2025
0 6
0
6
hrawat
CHECK_METHOD = modtime is not working as expected due to a regression in 9.x as there is wrong calculation which will...
by hrawat Splunk Employee Splunk Employee in Knowledge Management 11-25-2025
2 2
2
2
Zombiesunday261
About defining fixed roles meaningSh should only do searchIdx should only do indexingHf should only do log ingestion ...
by Zombiesunday261 New Member in Deployment Architecture 11-20-2025
0 2
0
2
sanjai
Hi Splunkers,I’m seeing a “Percentage of small buckets is high” health warning on one of my indexers.The alert shows:...
by sanjai Path Finder in Deployment Architecture 11-20-2025
0 1
0
1
smakwana
Hi,I am trying to onboard aws access logs from a S3 bucket using the Splunk Add-on for AWS installed in a Heavy Forwa...
by smakwana Explorer in Getting Data In 11-19-2025
0 3
0
3
sivaranjiniG
i have a standalone splunk machine there i am monitoring a airwatch sample logNov 13 20:48:19 AirWatch AirWatch Syslo...
by sivaranjiniG Communicator in Getting Data In 11-18-2025
0 4
0
4
R15
Hi, We recently set up (mostly) mTLS, just have a generic forwarder cert. But with the cert being deployed via an app...
by R15 Communicator in Getting Data In 11-18-2025
0 5
0
5
maheshnc
I wan to ingest data from a web application using HEC, but I don't understand where can I get the endpoint URL detail...
by maheshnc Path Finder in Getting Data In 11-18-2025
0 7
0
7
BSilva
We have a csv file that was uploaded into Splunk, with some interesting data for some Use-Cases.We would like to know...
by BSilva New Member in Getting Data In 11-17-2025
0 2
0
2
kaurinko
Hi, I am trying to establish an SSL/TLS-connection with own certificates between the UFs and the indexer. I would als...
by kaurinko Communicator in Getting Data In 11-17-2025
0 14
0
14
cmeo-bcit
Consider email headers which show all the steps involved in getting the email item from where it was sent to where it...
by cmeo-bcit Explorer in Deployment Architecture 11-16-2025
0 5
0
5
inventsekar
Hi There, As we are planning for the Bangalore Splunk Usergroup meeting around next month, if u r ready to speak(just...
by SplunkTrust SplunkTrust in Getting Data In 11-15-2025
1 0
1
0
UncleHugo
I am trying to upload logs and whenever I do the logs come out scattered.Do I have to give every colum a title e.g In...
by UncleHugo Explorer in Getting Data In 11-14-2025
0 2
0
2
grexo94
Hi all,I am trying to parse multiple nested Multimetric logs as metrics and am failing.The following source type work...
by grexo94 Engager in Getting Data In 11-14-2025
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.

How digitally resilient are you? Take a quick Digital Resilience Assessment to find out if you're prepared for disruption!
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...
Top Karma Authors