Splunk Administration

Splunk Administration
Category Activity
dkmcclory
Our Splunk ingestion for eStreamer events appears to be getting overwhelmed by the amount of data we receive.  Curren...
by dkmcclory Path Finder in Getting Data In 02-03-2025
0 8
0
8
arunkuriakose
i have a sample xml which looks like this script_family>Amazon Linux Local Security Checks</script_family> <filename>...
by arunkuriakose Explorer in Deployment Architecture 02-03-2025
0 2
0
2
aamer86
Hi, We have a set of indexers with no public IPs behind AWS NLB We would like to use AWS certificates that terminate ...
by aamer86 Path Finder in Security 02-03-2025
0 7
0
7
rolltide
We have a deployment server as an instance of a search head. How many clients can a deployment server can handle?
by rolltide Engager in Deployment Architecture 02-02-2025
0 7
0
7
splunk_user_99
Hello everyone, I’m having trouble getting Splunk to recognize timestamps correctly, and I hope someone can help me o...
by splunk_user_99 Explorer in Getting Data In 02-02-2025
0 2
0
2
Wenjian_Zhu
Dear splunkers,When set useAck = true (https://docs.splunk.com/Documentation/Splunk/9.4.0/Forwarding/Protectagainstlo...
by Wenjian_Zhu Explorer in Getting Data In 02-02-2025
0 4
0
4
eramirezmx
Hi, we are a splunk partner previously Appdynamics partner.  In Appdynamics we had a solution to monitor IBM Z, howev...
by eramirezmx Engager in Monitoring Splunk 01-31-2025
0 3
0
3
townie
HiMy setup is Splunk Enterprise on ubuntu server. Ive setup netflow config on the edgerouter but can't seem to get an...
by townie New Member in Getting Data In 01-30-2025
0 0
0
0
nmadhok
Wanting to forward all raw events from Client/Application to a specified HTTP Event Collector (HEC) endpoint/URL for ...
by nmadhok Path Finder in Getting Data In 01-30-2025
0 3
0
3
a1bg503461
We are implementing an app to collect large csv report via python script but the interval in seconds period is not a ...
by a1bg503461 Path Finder in Getting Data In 01-30-2025
0 2
0
2
Poojitha
Hi All,I have a dropdown multi-select created using dashboard studio with default value set as "All".  This All is no...
by Poojitha Communicator in Getting Data In 01-30-2025
0 3
0
3
Rim-unix
Hi Team, we are planning to build DR Splunk indexer on AWS Cloud.could you give the detailed instructions for creatin...
by Rim-unix Engager in Deployment Architecture 01-30-2025
0 7
0
7
sivaecr
Hello All, Please, someone, help us with the below error.While trying to configure Splunk cloud forwarder credential...
by sivaecr New Member in Installation 01-30-2025
0 4
0
4
intosplunk
Hey Splunkers, I'm trying to create a conditional search that will run on the same index but will have different sear...
by intosplunk Engager in Security 01-30-2025
0 2
0
2
Nawab
I have an IIS server that is sending logs to splunk, and the logs are saved in w3c format. but I found that logs are ...
by Nawab Communicator in Getting Data In 01-29-2025
0 3
0
3
BasicCrow
Hello, I have a Palo Alto Firewall in my environment and would like to set it up to forward logs to a Splunk indexer ...
by BasicCrow Engager in Getting Data In 01-29-2025
0 3
0
3
ChristopherHolt
Not sure the best way to go about this. We had an index that originally had a 30 day retention that they wanted exten...
by ChristopherHolt Loves-to-Learn Lots in Getting Data In 01-29-2025
0 1
0
1
Real_captain
Hi Is it possible to create a workflow like below in Splunk. We have 5 jobs running everyday and the start/end time w...
by Real_captain Path Finder in Getting Data In 01-29-2025
0 3
0
3
FRTS777
I'm planning to upgrade a multi-site IDX & SHC environment to version 9.3 and i have question regarding the automated...
by FRTS777 New Member in Deployment Architecture 01-29-2025
0 2
0
2
_joe
This isn't so much a question as a comment. I found that time config to be incorrect. My logs start like this:{"Time"...
by _joe Contributor in Getting Data In 01-29-2025
0 1
0
1
danielbb
What do I need to change in order to convert HEC on HTTP to HEC on HTTPS?
by danielbb Motivator in Getting Data In 01-29-2025
0 4
0
4
nadeem2306
We are currently monitoring application URLs using the "Website Monitoring" add-on. However, many URLs are returning ...
by nadeem2306 New Member in Getting Data In 01-29-2025
0 2
0
2
danielbb
Introspection seems to give me the data.mount_point only for "/" and not for the other file systems that I can see vi...
by danielbb Motivator in Monitoring Splunk 01-28-2025
0 1
0
1
sahils
We integrated Splunk with CA Spectrum, but how do we send SNMP traps from Splunk? Please share the process or script ...
by sahils New Member in Getting Data In 01-28-2025
0 4
0
4
kajmaple
Hey,We are currently ingesting wineventlog from some of our Azure VMs via Eventhub. As such, their assigned sourcetyp...
by kajmaple Loves-to-Learn Lots in Getting Data In 01-28-2025
0 0
0
0
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors