Splunk Administration

Splunk Administration
Category Activity
zksvc
Hi there, I was ingest new server to new index (Ubuntu with UF) Let say my index is index=ABC I want to connect it in...
by zksvc Contributor in Deployment Architecture 09-29-2024
0 10
0
10
zksvc
Yesterday i was ingest new server in my Splunkin my case, in directory /opt/splunkforwarder/etc/system/local/inputs.c...
by zksvc Contributor in Deployment Architecture 09-29-2024
0 10
0
10
BTrust
Hi All,I have this compressed (reduced version of large structure) which is a combination of basic text and JSON: 202...
by BTrust Path Finder in Getting Data In 09-28-2024
0 15
0
15
mmatin
Hi,I have setup 2 VMs in Virtual box, installed the Splunk Enterprise in Windows server 2022, and installed the unive...
by mmatin Explorer in Getting Data In 09-28-2024
0 6
0
6
rijinc
Submit Date / Creation Date Time Stamp Incident Response Date Time 09/14/2016 01:14 AM 09/14/2016...
by rijinc Path Finder in Getting Data In 09-28-2024
0 8
0
8
Gil
Hi all,i have a monitor stanza in inputs.conf  that monitor our organization proxy,the logs are sent by syslog-ngi ha...
by Gil Explorer in Getting Data In 09-28-2024
0 8
0
8
Siddharthnegi
Hi i want to extract highlighted partSep 24 10:43:25 10.82.10.245 [S=217] [BID=d57afa:30] RAISE-ALARM:acProxyConnecti...
by Siddharthnegi Contributor in Security 09-28-2024
0 2
0
2
Michael
Apologies, but I'm not groking this. I've read dozens of "answers", I've read several docs on the topic. But, I can't...
by Michael Contributor in Getting Data In 09-28-2024
0 13
0
13
att35
Hi,We use Splunk Forwarder to monitor application data. There are multiple folders on a given server, each with same ...
by att35 Builder in Getting Data In 09-28-2024
0 2
0
2
wardsd
I have a cyber security finding that states "The splunk service accepts connections encrypted using SSL 2.0 and/or SS...
by wardsd New Member in Deployment Architecture 09-28-2024
0 2
0
2
TomaszOledzki
Is there a native way to run scripts in pwsh.exe managed environment?It's not mentioned in docs so I believe not: htt...
by TomaszOledzki Engager in Getting Data In 09-27-2024
0 1
0
1
davidstuffle
I'm looking for a way to specify which host a [monitor] stanza applies to within the inputs.conf file. If the stanza...
by davidstuffle Path Finder in Getting Data In 09-27-2024
0 12
0
12
Mondaya13
Hello, I am confused about the "Expires" thing when setting an alert. I have my alert scheduled every day and the exp...
by Mondaya13 Explorer in Deployment Architecture 09-27-2024
0 2
0
2
rupert
After i updated tha add-on to 6.3.x I am not able to create or update account setting under account type Tenable.sc c...
by rupert Engager in Security 09-26-2024
0 2
0
2
MohammedKhanIUK
Hi all,I was wanting to get an understanding on what the minimum permissions available to enable the log flow between...
by MohammedKhanIUK New Member in Getting Data In 09-26-2024
0 3
0
3
tsondo
Greetings, We started seeing OPSNSSL vulnerabilities on all of our Splunk forwarders and the main engine this week. T...
by tsondo Explorer in Security 09-26-2024
0 23
0
23
Gayatri
Hi Team,Currently, we are using Splunk UF agents which is installed on all infra servers and which receives configura...
by Gayatri Explorer in Getting Data In 09-26-2024
0 4
0
4
scr1biddies
Hi, this is my 1st post, I'm a newbie splunkers.I have a case from my clients so, the splunk is running with LB follo...
by scr1biddies Loves-to-Learn Lots in Security 09-26-2024
0 8
0
8
islamjy2011
0
1
tsocyberoperati
Hello,Imagine you have hundreds of Windows Universal Forwarders each sending three sources to your "Heavy Forwarders"...
by tsocyberoperati Loves-to-Learn Lots in Getting Data In 09-25-2024
0 6
0
6
vnetrebko
Hi! Is there any way to make data retrival rate slower? Something like 1h worth of data every 1mWhen we are trying to...
by vnetrebko Explorer in Getting Data In 09-25-2024
0 1
0
1
AzmathShaik
Hello is any one working on brocade?? how to get logs from brocade to splunk???
by AzmathShaik Path Finder in Getting Data In 09-25-2024
0 3
0
3
robertlynch2020
Hi I have data that looks like below, as you can see some parts have blanks. Date | Time | UserName |iD ...
by robertlynch2020 Influencer in Knowledge Management 09-25-2024
1 4
1
4
Cleanhearty
As a newbie I am currently working on a mini internship project which requires me to analyse a dataset using splunk. ...
by Cleanhearty New Member in Getting Data In 09-24-2024
0 3
0
3
Siddharthnegi
Hi I want to extract highlighted partSep 24 10:43:25 10.82.10.245 [S=217] [BID=d57afa:30] RAISE-ALARM:acProxyConnecti...
by Siddharthnegi Contributor in Security 09-24-2024
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors