Splunk Administration

Splunk Administration
Category Activity
alec_stan
Good day Splunkers,We have two site/DCs, where one is production and the other a standby DR. In our current architect...
by alec_stan Explorer in Deployment Architecture 12-02-2024
0 5
0
5
DanAlexander
Hi community, The following mod=sed regex works as expected, but when I attempted on the system/local/props.conf on t...
by DanAlexander Communicator in Getting Data In 11-30-2024
0 5
0
5
norbertt911
Hi Splunkers,I have an HWF that collects the firewall logs. For cost-saving reasons, some events are filtered, not in...
by norbertt911 Communicator in Getting Data In 11-30-2024
0 5
0
5
danielbb
We are building a small Splunk installation in Azure and I'm not sure what the architecture should look like. The cli...
by danielbb Motivator in Deployment Architecture 11-30-2024
0 2
0
2
sosusa
Can Splunk SmartStore enabled with single site Indexer clustering which is spanning across two AWS regions?  Ex: One ...
by sosusa Engager in Deployment Architecture 11-30-2024
0 1
0
1
sonam12
hi All, I  installed Splunk Enterprise  windows v9.1.0.1 but o inside C:\Program Files\Splunk> I can see only these f...
by sonam12 New Member in Installation 11-28-2024
0 4
0
4
nolja
hiindex=idx_myindex source="/var/log/mylog.log" host="myhost-*" "memoryError"I know that if I give the conditions abo...
by nolja Engager in Monitoring Splunk 11-28-2024
0 1
0
1
okeyalex
Is there a reason why the auth-success is excluded from the system_actions.csv lookup file in the Splunk Add-on for p...
by okeyalex New Member in Getting Data In 11-28-2024
0 1
0
1
MMMM
Dear All,I am facing difficulty in loading all the evtx files in a folder to Splunk.I am using free Splunk version fo...
by MMMM Observer in Getting Data In 11-28-2024
0 5
0
5
pragatip
How splunk calls coldToFrozen.py script automatically once the script is setup in /opt/splunk/bin and indexes.conf fi...
by pragatip Engager in Monitoring Splunk 11-28-2024
0 1
0
1
BRFZ
Hello,I would like to confirm if it is possible to upgrade Splunk directly from version 9.1.1 to 9.3 on Linux, withou...
by BRFZ Communicator in Installation 11-28-2024
0 2
0
2
kbrisson
I'm sure this has been asked before but can't find the answer. I'm looking to use SPLUNK to provide better metrics fr...
by kbrisson Loves-to-Learn in Getting Data In 11-27-2024
0 1
0
1
Codyy_Fast
Hello Splunk Community,   i monitor the audit.log on RHEL8. As soon as I generate a specific log entry locally, I can...
by Codyy_Fast Explorer in Deployment Architecture 11-27-2024
0 2
0
2
Sailesh6891
Hi,I have a log source (/logs/abc/def). I want to know what are the apps  using this log source in their inputs.conf....
by Sailesh6891 Engager in Monitoring Splunk 11-27-2024
0 5
0
5
DanAlexander
Hi Community,Trying to build regex that can help me reduce the size of an EventCode in my case this is 4627The idea i...
by DanAlexander Communicator in Getting Data In 11-27-2024
0 4
0
4
daniel99
I am trying to configure Splunk to ingest only application, system and security logs from my local machine. But I can...
by daniel99 New Member in Getting Data In 11-27-2024
0 2
0
2
LogUx
Hello Splunkers!!During the testing phase with demo data, the timestamps are matching accurately. However, in real-ti...
by LogUx Motivator in Getting Data In 11-27-2024
0 21
0
21
dflodstrom
My goal is to update the Splunk admin password across newly configured instances using the same password. These serve...
by dflodstrom Builder in Security 11-27-2024
0 5
0
5
hrawat
Starting 9.2.0 release internal metrics log event generation can be controlled by group or subgroup.  If there are th...
by hrawat Splunk Employee Splunk Employee in Knowledge Management 11-26-2024
3 3
3
3
JoaoBatanete
Como criar uma busca de emprego através de uma API REST?   A ferramenta que devo usar é o Azure Data Factory para cha...
by JoaoBatanete New Member in Getting Data In 11-26-2024
0 1
0
1
Alpang
Does Splunk DBConnect support gMSA accounts? If so, when configuring the Splunk Identity, do I leave the password fie...
by Alpang Engager in Getting Data In 11-26-2024
1 1
1
1
anandhalagaras1
Hi Team, We are planning to perform a silent installation of the Splunk Universal Forwarder on a Linux client machine...
by anandhalagaras1 Contributor in Getting Data In 11-26-2024
0 1
0
1
Siddharthnegi
Hello I want to see all indexes latest data time. like when did the latest data came to this index.
by Siddharthnegi Contributor in Security 11-25-2024
0 1
0
1
AliMaher
Hello Splunker,I hope you all are doing well. I have tried to deploy the Windows-TA Add-On over my environment [Searc...
by AliMaher Path Finder in Deployment Architecture 11-25-2024
0 5
0
5
dolj
with respect to the Magic 8 should you always try to include them in the props of your various source types for a dat...
by dolj Explorer in Getting Data In 11-25-2024
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors