Splunk Administration

Splunk Administration
Category Activity
super_edition
Hello Everyone,I am trying to extract the unique browser name along with its count from the list of user agents(attac...
by super_edition Path Finder in Security 12-11-2024
0 3
0
3
Aresndiz
I'm working with the Windows TA for Splunk, however the metrics it obtains for CPU are not correct. On my server, not...
by Aresndiz Explorer in Getting Data In 12-11-2024
0 1
0
1
tollops
Hi; We are currently setting up multiple new forwarders, which are getting their configs from the deployment server. ...
by tollops Explorer in Getting Data In 12-11-2024
4 16
4
16
Vikashnat90
Hi teamI'm trying to attach multiline config for all the pods in a namespace. Is there a way to achieve that? Adding ...
by Vikashnat90 New Member in Deployment Architecture 12-11-2024
0 1
0
1
Nraj87
Dear  All ,Some Dynamic Sources in my environment are ingesting more data into Splunk and License limit get breach.So...
by Nraj87 Explorer in Getting Data In 12-11-2024
0 2
0
2
NoSpaces
Hello to everyone!I planned to ingest *.csv files using Universal Forwarder from Windows Server 2019 in batch mode.It...
by NoSpaces Contributor in Getting Data In 12-11-2024
0 5
0
5
rickymckenzie10
I want to create a Splunk dashboard that breaks down a splunk dashboard:What app does it belong too.what index or ind...
by rickymckenzie10 Explorer in Getting Data In 12-10-2024
0 2
0
2
jpillai
Hi all,Is it possible to get informations on the cluster manager config bundle through rest api? I am specifically lo...
by jpillai Path Finder in Getting Data In 12-10-2024
0 2
0
2
thebeno
I want to focus your attention on the method of collecting CPU utilization data in Splunk_TA_nix (cpu_metric.sh).I ha...
by thebeno Explorer in Getting Data In 12-10-2024
1 2
1
2
jefffredericks
I've set up a dev 9.2 Splunk environment. And I'm trying to use a self-signed cert to secure forwarding. But every ti...
by jefffredericks New Member in Deployment Architecture 12-10-2024
0 1
0
1
arieljit
I'm not able to even open a support ticket as there's a required field i can't fill in.tried with both gmail and my c...
by arieljit Explorer in Installation 12-10-2024
0 2
0
2
Mshah26
Hello,We attempted to upgrade Splunk OTEL on the cluster using the helm3 upgrade command, but encountered the followi...
by Mshah26 Engager in Monitoring Splunk 12-09-2024
1 1
1
1
spodda01da
We have configured a universal forwarder on 4 Domain Controllers in our environment. Now, we receive security events...
by spodda01da Path Finder in Getting Data In 12-09-2024
0 5
0
5
omerl
Hey, I have around 30 Splunk Universal Forwarders on my environment, monitoring the local Event Log (Windows Servers...
by omerl Path Finder in Getting Data In 12-09-2024
2 7
2
7
AliMaher
Hello,   I have a Heavy Forwarder, and it was configured just to forward not index: [indexAndForward] index = false ...
by AliMaher Path Finder in Deployment Architecture 12-09-2024
0 3
0
3
madhav_dholakia
Hello,We are trying to achieve Power BI integration with Splunk. We have Power BI installed on windows machine and we...
by madhav_dholakia Contributor in Getting Data In 12-09-2024
0 5
0
5
sathiyasun
Standard format of data ingestion with default setup sending data via HEC token, Data getting ingested non-human read...
by sathiyasun Explorer in Getting Data In 12-09-2024
0 1
0
1
splunker_wizard
Hi Team,We have a requirement to mask/filter data before ingestion at Splunk cloud environment. Custom has Splunk Clo...
by splunker_wizard New Member in Getting Data In 12-09-2024
0 1
0
1
ghlogger
I think this is a sample snip of the auth0 xml response but there is no attribute to use that has group information (...
by ghlogger Explorer in Security 12-08-2024
1 5
1
5
AliIqbal
Does anyone know if GlobalMantics dataset is available in the free version of splunk, or is it only included in the p...
by AliIqbal New Member in Getting Data In 12-08-2024
0 1
0
1
inventsekar
Dear Splunkers... As i was checking about the fishbuckets at the splexiconhttps://docs.splunk.com/Splexicon:Fishbucke...
by SplunkTrust SplunkTrust in Monitoring Splunk 12-07-2024
0 9
0
9
DanAlexander
Hello CommunityI need regex that can return extract the following fields only from event 4702:1. <EventID></EventID>2...
by DanAlexander Communicator in Getting Data In 12-06-2024
0 8
0
8
zksvc
Hey Everyone, i got information if Wazuh can send data to Splunk, i want reverse it. Because i want to send data from...
by zksvc Contributor in Getting Data In 12-06-2024
0 4
0
4
inventsekar
Hi There,hope u r doing good, thanks for reading. 1) A fresh install of Splunk Enterprise 9.3.2 showing this security...
by SplunkTrust SplunkTrust in Deployment Architecture 12-06-2024
0 5
0
5
klim
I need to forward data from a heavy forwarder to two different indexer clusters. One of the clusters needs to have a ...
by klim Path Finder in Getting Data In 12-06-2024
0 3
0
3
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors