Splunk Administration

Splunk Administration
Category Activity
Peter95
Hello,I am facing strange issue with a Splunk Forwarder where on some servers of the same role is CPU usage 0-3% and ...
by Peter95 New Member in Getting Data In 11-15-2024
0 1
0
1
fl66
Hi,I am using the Db connect 3.18.1 to collect sql audit logs FROM sys.fn_get_audit_file function.  When I use event_...
by fl66 Observer in Getting Data In 11-15-2024
0 3
0
3
splunklearner
Hi all,We have specific AD group for specific application and we create index for that app and restrict access to tha...
by splunklearner Communicator in Getting Data In 11-15-2024
0 5
0
5
eluisramos
My effective daily volume was set to 3072 MB due to 3 License usage of 1024 MB each, but these were about to expire s...
by eluisramos Loves-to-Learn Lots in Installation 11-14-2024
0 1
0
1
MayurMangoli
I have a heavy forwarder, where all security devices logs have been pointed to HF, and from HF logs have been forward...
by MayurMangoli Loves-to-Learn Everything in Monitoring Splunk 11-14-2024
0 4
0
4
nisha_sh
Dear All,I want to integrate Imperva SecureSphere WAF with SPlunk.I have installed the add-on to my Search head, its ...
by nisha_sh Loves-to-Learn Everything in Installation 11-14-2024
0 3
0
3
myandow
Is there a best practice to restrict access to events in Splunk by index and sourcetype? I have tested using the ...
by myandow Path Finder in Getting Data In 11-14-2024
0 4
0
4
KSV
hi guysAfter adding [clustering] stanza and [replication_port://9887] in indexer cluster,  getting the below errorERR...
by KSV Loves-to-Learn in Deployment Architecture 11-14-2024
0 5
0
5
splunklearner
I am pretty new to Splunk and my project is also new. Can someone please explain the configurations given in our clus...
by splunklearner Communicator in Getting Data In 11-14-2024
0 2
0
2
cpaulraj
Has anyone figured out how to run powershell only at scheduled time? In addition to scheduled time, it is running eve...
by cpaulraj New Member in Getting Data In 11-14-2024
0 3
0
3
gavsdavs_GR
Not sure if this is a bug or just weird behaviour, I don't seem to be able to work around it. I have loads of powers...
by gavsdavs_GR Path Finder in Getting Data In 11-14-2024
1 8
1
8
AliMaher
Hello Splunker,   I have two volumes with the following specs: Hot/Warm Volume: 5.25 TB Cold Volume: 4.75 TB ======...
by AliMaher Path Finder in Deployment Architecture 11-13-2024
0 2
0
2
Poojitha
Hi All,I have a question. What exactly 'Dispatch_rest_to_indexers' mean ?I am getting warning when running rest comma...
by Poojitha Communicator in Security 11-13-2024
0 5
0
5
ltrand
So I understand that the minimum timespan on a hot bucket is 1 hour, but bucket sizing defaults to a file size instea...
by ltrand Contributor in Getting Data In 11-13-2024
0 11
0
11
rtalcik
HI All,   So i wrote this in attempt to reject all RFC1918  TO RFC1918 logs for windows event logs with WID 5156.  ba...
by rtalcik Path Finder in Getting Data In 11-13-2024
0 4
0
4
splunkreal
Hello, if you are using _TCP_ROUTING and index rename on target platform, logs may go to "last chance index"    
by splunkreal Influencer in Getting Data In 11-13-2024
0 1
0
1
jthurston
As you may know, the Splunk OTel Collector can collect logs from Kubernetes and send them into Splunk Cloud/Enterpris...
by jthurston Splunk Employee Splunk Employee in Getting Data In 11-12-2024
0 0
0
0
KingUs80
Hello,We are in the process of fully migrating our Splunk Enterprise deployment to the Azure Cloud and will no longer...
by KingUs80 Loves-to-Learn Lots in Other Admin 11-12-2024
0 7
0
7
MadalinaT
Hei,We have onboarded data from HP Storage  and I am not sure if there is any TA for this technology or how to extrac...
by MadalinaT Engager in Getting Data In 11-12-2024
0 1
0
1
shai
I want my customer to be able to set the "interval" and control how frequent the module runs.I started with this:defa...
by shai Explorer in Getting Data In 11-12-2024
0 4
0
4
sajjadali1122
How can I troubleshoot slow search performance in Splunk when searching across large datasets?"
by sajjadali1122 New Member in Getting Data In 11-11-2024
0 1
0
1
Paramy
Hello , Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment...
by Paramy Loves-to-Learn Lots in Getting Data In 11-11-2024
0 2
0
2
AliMaher
Hello Esteemed Splunkers,I have a long question, and I wish to have a long and detailed discussion ^-^ First of all: ...
by AliMaher Path Finder in Deployment Architecture 11-11-2024
0 1
0
1
jan
Could not contact master. Check that the master is up, the master_uri=https://10.0.209.11:8089 and secret are specifi...
by jan Loves-to-Learn in Other Admin 11-11-2024
0 1
0
1
helpmesplunk
I tried to upload a zip file. It showed "Upload failed ERROR: Read Timeout." I am using Windows. The file size is 191...
by helpmesplunk Observer in Getting Data In 11-11-2024
0 0
0
0
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors