| | I've recently noticed that the search history function on Splunk does not replicate over a search head cluster. This ... 4 16 | 4 | 16 | |
| | My office has deployed around 120 devices that they have now requested splunk be added to. We have been unsuccessful ... 0 1 | 0 | 1 | |
| | hello, trying to monitor below path from the host gas UF installed: C:\Program Files (x86)\dir1\log\name_CRT_[DDMMYYY... 0 1 | 0 | 1 | |
| | Hello, we run an Indexer that functions as deployment server as well. I have already configured it to use our CA-Cert... 0 4 | 0 | 4 | |
| | Hi, F5 team is sending logs to our splunk syslog server as comma seperated values. Post onboarding we see some of fie... 0 2 | 0 | 2 | |
| | We have 500 domain workstations, and we have installed Splunk Universal Forwarders (UF) on the Active Directory serve... 0 7 | 0 | 7 | |
| | So I am trying to find the geo location for some IP addresses that keep crashing our webserver when they crawl it. I... 0 2 | 0 | 2 | |
| | Hello,Below is my log file and I want to break as two log events in splunk using props.conf(regex) 2024-07-31T01:38:0... 0 11 | 0 | 11 | |
| | I am pretty new to Splunk. What is the difference between Splunk on premises vs Splunk cloud vs AWS splunk? Please en... 0 4 | 0 | 4 | |
| | I am deployed to new project in splunk. We have logs coming from F5 WAF devices sent to our syslog server. Then we wi... 0 2 | 0 | 2 | |
| | Hi team,I have been experiencing issues with log ingestion in a Windows Server and I was hoping to get some advice.Th... 0 4 | 0 | 4 | |
| | We are trying to onboard data from F5 WAF devices to our splunk. F5 team sending it by key value pairs. And one of th... 0 1 | 0 | 1 | |
| | Hello,How to collect DNS logs from Active Directory where the domain controllers have a DNS role 0 4 | 0 | 4 | |
| | Hello everyone,I have set up my Splunk server and Splunk forwarder. When I explore the settings, I can see one host a... 0 3 | 0 | 3 | |
| | I have this docker file when my base image is red-hat9 ENV SPLUNK_PRODUCT splunkENV SPLUNK_VERSION 7.0.3ENV SPLUNK_B... 0 1 | 0 | 1 | |
| | I have the following props which works fine in the "Add Data" GUI and a test file of logs:EVENT_BREAKER = ([\r\n]+)\<... 0 3 | 0 | 3 | |
| | Does Splunk on Prem or cloud have a solution that allows users to be an Analyst when doing that role and sign in or e... 0 3 | 0 | 3 | |
| | Hi, I am dealing with an issue where I am ingesting some logs that contains a few regular line then followed by xml d... 0 3 | 0 | 3 | |
| | Hi Folks, currently we have 4 physical indexers running on CentOS but since CentOS is EOL , plan it to migrate OS fro... 0 15 | 0 | 15 | |
| | Hi, if an environment encounters the error 'Search not executed: The minimum free disk space (5000MB) reached for /op... 0 4 | 0 | 4 | |
| | Does anyone have an idea on why I am returning the following error: Parameters must be in the form '-parameter value'... 0 11 | 0 | 11 | |
| | Hi there, i got issue when setting connector Splunk in OpenCTIWhen i check logs, it says terminatedi follow guide fro... 0 4 | 0 | 4 | |
| | I recently upgraded my deployment from a 9.0.3 to 9.2.2. After the upgrade, the KV stopped working. Based on my resea... 0 1 | 0 | 1 | |
| | Hi all,I want to send logs (which are part from our sourcetype [kube_audit]) from my HeavyForwarder to a third-party ... 0 3 | 0 | 3 | |
| | Splunk version 9.0.8/9.1.3/9.2.x and above has added capability to process key value pairs that will be added at inde... 3 6 | 3 | 6 | |
