Splunk Administration

Splunk Administration
Category Activity
NullZero
I'm using a distributed Splunk Enterprise environment with over 15 peers at the Indexer Tier.  I have some JSON data ...
by NullZero Communicator in Getting Data In 09-07-2024
0 4
0
4
splunkguy
How do I migrate Dashboards and alerts from older standalone search head to new standalone search 
by splunkguy Engager in Installation 09-07-2024
0 7
0
7
KhalidAlharthi
Hello Members, I have configured splunk HF to recieve data input as port 1531/udp  i used command firewall-cmd --perm...
by KhalidAlharthi Explorer in Deployment Architecture 09-06-2024
0 2
0
2
sagar_shubham23
Hi Folks, I am trying to backlist the gz files in input.conf. But somehow the blacklist doesn't work properly. Files ...
by sagar_shubham23 Explorer in Getting Data In 09-06-2024
0 3
0
3
Gk7
Do we have any facility in the Splunk that we can achieve the High availability or Disaster recovery features in the ...
by Gk7 Engager in Deployment Architecture 09-06-2024
0 6
0
6
mitag
After updating a bucket replication policy and doing a rolling restart of cluster indexers, one of the indexers seems...
by mitag Contributor in Deployment Architecture 09-05-2024
1 13
1
13
jm_tesla
Suppose I have `/var/log/nginx/access.log` and then a dozen files in the same directory named like `access.log-<date>...
by jm_tesla Engager in Getting Data In 09-05-2024
0 5
0
5
ryanf
Hi everyone,I’m currently sending vCenter logs via syslog to Splunk and have ensured that the syslog configuration an...
by ryanf Engager in Getting Data In 09-05-2024
0 1
0
1
Alex_Rus
After updating the SSL keys, events with errors "ExecProcessor from python /opt/splunk/etc/apps/SA-Hydra/bin/bootstra...
by Alex_Rus Loves-to-Learn Lots in Monitoring Splunk 09-05-2024
0 0
0
0
Ricco19
Hi, The Splunk Heavy Forwarders and Deployment Servers were running under Splunk user. Unfortunately, during the upgr...
by Ricco19 Loves-to-Learn in Getting Data In 09-05-2024
0 1
0
1
rweales
We have been using Splunk on a Windows server without issue.  It ingested logs from Vmware hosts, networking hardware...
by rweales Explorer in Getting Data In 09-04-2024
0 9
0
9
solman07
Hello all, implementing some routing at the moment in order to forward a subset of data to a third party syslog syste...
by solman07 New Member in Getting Data In 09-04-2024
0 1
0
1
discenzadoe
We are working with several remote datasets that are combined to give our end user a specific result.  Federated Sear...
by discenzadoe Explorer in Getting Data In 09-04-2024
0 3
0
3
adrifesa95
Hello, We are ingesting Checkpoint logs through an Edge Processor to our SCP. We have deployed Splunk Add-on for Chec...
by adrifesa95 Engager in Getting Data In 09-04-2024
0 2
0
2
Mohamamd_Mir
There is no default solution in Splunk for managing the Frozen Bucket (Path). I wrote a script where you provide a co...
by Mohamamd_Mir Explorer in Other Admin 09-04-2024
0 4
0
4
tringener
After creating a new LDAP strategy and entering all required information I get an error when saving.Entry not saved, ...
by tringener Explorer in Security 09-03-2024
0 2
0
2
kig121
Hi,I have a splunk search which give back the testcase_id's.I need a button which call a rest API request.Rest API in...
by kig121 Loves-to-Learn Lots in Getting Data In 09-03-2024
0 5
0
5
TheDWord
I need to run Splunk Stream on some universal forwarders to capture data from a set of servers. The only way I've bee...
by TheDWord Engager in Deployment Architecture 09-03-2024
0 0
0
0
regriffith
I am searching yesterday's data and trying to insert it into an index for reporting purposes. I need to take multiple...
by regriffith Path Finder in Knowledge Management 09-03-2024
2 8
2
8
MCW
Hi experts,I am in early experiment journey with Splunk App for DSDL (aka DLTK) to pull in some events into Jupyterno...
by MCW Explorer in Deployment Architecture 09-03-2024
1 1
1
1
markhvesta
I am trying to route metric type events to a null queue to avoid indexing them but they are still coming through.  An...
by markhvesta Path Finder in Getting Data In 09-03-2024
0 6
0
6
KhalidAlharthi
I have events from Trellix Hx appliance and i need to adjust _time of the log events because it coming as 9/3/20 and ...
by KhalidAlharthi Explorer in Getting Data In 09-03-2024
0 2
0
2
KhalidAlharthi
the index is appearing inside the indexer cluster dashboard inside cluster master but when i try to search it using S...
by KhalidAlharthi Explorer in Deployment Architecture 09-02-2024
0 2
0
2
Nawab
I have a deployment, where 2 HF's are acting as DS. and they are both connected to MC for licensing at port 8089. In ...
by Nawab Communicator in Deployment Architecture 09-02-2024
0 6
0
6
KhalidAlharthi
Hello members, I have clustered environment and i create index on HF and data inputs for receive syslog, I create the...
by KhalidAlharthi Explorer in Deployment Architecture 09-02-2024
0 5
0
5
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors