Splunk Administration

Splunk Administration
Category Activity
Y7698will
Splunk UF is not sending logs to Splunk. The Splunkd constitutes full of errors and warnings as below.The telnet conn...
by Y7698will New Member in Installation 09-11-2024
0 8
0
8
Hiattech
We migrated our Splunk indexer from Ubuntu to RHEL recently. Everything appeared to go fine except for this one add-o...
by Hiattech Explorer in Getting Data In 09-11-2024
0 2
0
2
L_Petch
Hello, A client went mad on how many saved searches they require and wont get rid of them. Due to this it is hammerin...
by L_Petch Path Finder in Deployment Architecture 09-11-2024
0 2
0
2
olivier_ma
Hello, It's not the first time that I notice this issue, but I cannot find a workaround this time. I'm trying to ove...
by olivier_ma Explorer in Knowledge Management 09-11-2024
0 5
0
5
FlorianScho
 Hi Community!i have a (kind of ) special problem with my data routing.Topology:We have 2 different Clusters, one for...
by FlorianScho Path Finder in Getting Data In 09-11-2024
0 4
0
4
shangshin
Hi, I am using SplunkForwarder to forward data to a non-splunk system by adding the stanza below in outputs.conf. ...
by shangshin Builder in Getting Data In 09-11-2024
2 20
2
20
hrawat
Heavy forwarder or indexer crashes with FATAL error on typing thread. Note: Issue is now fixed for next 9.2.2/9.1.5/9...
by hrawat Splunk Employee Splunk Employee in Knowledge Management 09-11-2024
4 9
4
9
KhalidAlharthi
Hello members, i'm facing an issue with index clustering and indexers peers one of peers has addingbatch status and a...
by KhalidAlharthi Explorer in Monitoring Splunk 09-11-2024
1 9
1
9
hanseMand
I'm trying to import a csv file generated by the NiFi GetSplunk component. It retrieves events from a Splunk Instance...
by hanseMand Observer in Getting Data In 09-11-2024
0 0
0
0
MattKr
Dear community,it might be an odd question but i need to forward the splunkd.log to a foreign syslog server,therefore...
by MattKr Explorer in Getting Data In 09-10-2024
0 1
0
1
kirk_in_porto
Splunk docs show all deployment components needing a minimum of x64, 12 cores, 12GB, 2GHZMy question is for a dedicat...
by kirk_in_porto Explorer in Deployment Architecture 09-10-2024
0 3
0
3
jlhamlet
Hi,My team (Team1) has a cluster of indexers and a search head cluster. We want to add a dedicated a search head to T...
by jlhamlet Path Finder in Deployment Architecture 09-10-2024
0 3
0
3
rg0nzalez
Is it possible to ingest data related specifically from Microsoft Defender Safe Links?  We have tried both Microsoft ...
by rg0nzalez New Member in Getting Data In 09-10-2024
0 1
0
1
brent_weaver
I am working to decommission some indexers from my cluster. I am using splunk offline --enforce-counts and letting th...
by brent_weaver Builder in Getting Data In 09-10-2024
0 2
0
2
KhalidAlharthi
Hello Members, i have data coming from HF indexed in indexer and i can search it the problem at the details of event ...
by KhalidAlharthi Explorer in Deployment Architecture 09-10-2024
0 14
0
14
Iana_R
Hello guys,I am quite new on the topic so I really need tyour help ^_^.I am ingesting Zscaler logs in a Splunk Cloud ...
by Iana_R Loves-to-Learn Lots in Getting Data In 09-10-2024
0 1
0
1
jesperbassoe
Hi folks..I have an issue where I can't get an event to break right.The event looks like this  **********************...
by jesperbassoe Explorer in Getting Data In 09-09-2024
0 4
0
4
arunkuriakose
 I have logs indexed like this. How to break entries based on each lines . i need each line as a seperate entry. I tr...
by arunkuriakose Explorer in Getting Data In 09-09-2024
0 7
0
7
jmartens
We have enabled Microsoft SAML for Splunk and out splunkd.log seems to be flooded with warnings like this:WARN UserMa...
by jmartens Path Finder in Security 09-09-2024
0 8
0
8
yallami
Hello, i am trying to intergrate the Splunk Ui Toolkit into my  own Splunk instace that is running on localhost.I am ...
by yallami Explorer in Getting Data In 09-09-2024
0 3
0
3
Redwood
Hi all, I am a bit of a newbie here, and am trying to setup HEC on splink cloud, however the URL I have created follo...
by Redwood Loves-to-Learn Lots in Getting Data In 09-08-2024
0 2
0
2
KhalidAlharthi
Hello members i'm facing problems regarding parsing the event details on splunk i have forwarded the events from HF t...
by KhalidAlharthi Explorer in Deployment Architecture 09-08-2024
0 3
0
3
reswob4
I'm trying to use oneshot on a Windows HF to test some data. Here is the command and the result: C:>"Program Files\...
by reswob4 Builder in Deployment Architecture 09-07-2024
0 5
0
5
vpsmax
Hello.Trying to test a sourcetype using "oneshot".  Although we were able to add raw data using "oneshot" the first t...
by vpsmax Path Finder in Getting Data In 09-07-2024
0 3
0
3
markconlin
I am attempting to test a SEDCMD for event manipulation and it does not appear this is possible via oneshot? When I t...
by markconlin Path Finder in Getting Data In 09-07-2024
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors