Splunk Administration

Splunk Administration
Category Activity
joesrepsolc
I've got 95% of this new input working, but was hoping to also configure the TZ (dynamically) based on the host name ...
by joesrepsolc Communicator in Getting Data In 08-07-2024
0 10
0
10
Dov1
Hello,I have splunk installed on 3 servers (searchhead, index, HF) on windows server.I upgrade from 8.2.x to 9.2.1 - ...
by Dov1 Observer in Installation 08-07-2024
0 3
0
3
Ashker
Hi Team, I am monitoring blucoat proxy logs via syslog log collection method. My input.conf file is configured to rea...
by Ashker Loves-to-Learn in Getting Data In 08-07-2024
0 3
0
3
TheBravoSierra
I recently updated Splunk_TA_Windows and am seeing this error on my search head cluster:[Indexers] Could not load loo...
by TheBravoSierra Path Finder in Deployment Architecture 08-07-2024
0 4
0
4
amt
I had so much trouble with this but figured I would share what I did to make it work for me. You may have other ways ...
by amt Explorer in Security 08-07-2024
0 4
0
4
kairisrj
I've replaced 2 or my 4 indexers in the cluster on an AWS deployment. The Indexer Cluster Status shows the right lis...
by kairisrj Explorer in Deployment Architecture 08-07-2024
1 12
1
12
SplunkExplorer
Hi Splunkers, I have the following tasks: I need to compare 2 different Splunk instances, that should be deployed in ...
by SplunkExplorer Contributor in Knowledge Management 08-07-2024
0 3
0
3
fredclown
We have a legacy all-in-one Splunk server. We have built out a new distributed environment that has an indexer cluste...
by fredclown Builder in Deployment Architecture 08-07-2024
0 3
0
3
psla
Hi Lookup table doesn't contain the current version of the forwarder. Instead, the highest ever seen version is store...
by psla Explorer in Monitoring Splunk 08-07-2024
0 1
0
1
chuckpnla
When we attempted to upgrade Splunk Universal Forwarder on our windows servers, they repeatedly failed.  Here is a wi...
by chuckpnla New Member in Installation 08-07-2024
0 3
0
3
chaturvedi
I need to create an alert but the data to be fetched from the server is using a lot of license in Splunk.The data tha...
by chaturvedi New Member in Getting Data In 08-07-2024
0 1
0
1
s_unny
The diskspace remaining=6235 has breached the yellow threshold for filesystems=['C:\Program Files\Splunk\var\lib\splu...
by s_unny Loves-to-Learn Lots in Monitoring Splunk 08-07-2024
0 2
0
2
urikura
Hello Cisco Security team,Firstly I'd like to say thank you for creating such a great splunk app!Now I am playing wit...
by urikura Loves-to-Learn Lots in Getting Data In 08-06-2024
0 0
0
0
arowsell_splunk
After moving to Splunk 6.4.x, the following error can occur in the UI when navigating to: Apps —> Browse more apps ...
by arowsell_splunk Splunk Employee Splunk Employee in Security 08-06-2024
1 10
1
10
hrawat
splunkd.log is flooded by following log.WARN AutoLoadBalancedConnectionStrategy [xxxx TcpOutEloop] - Current dest hos...
by hrawat Splunk Employee Splunk Employee in Getting Data In 08-06-2024
0 19
0
19
raiqb01
Hi,While troubleshooting below error message: "The percentage of non high priority searches delayed (75%) over the la...
by raiqb01 Engager in Deployment Architecture 08-06-2024
0 1
0
1
mubeen
Hello,I have a montly report that is huge (300 MB approx) and would like it to be exported to an external SFTP Server...
by mubeen New Member in Getting Data In 08-06-2024
0 1
0
1
nz_021
Hello Everyone,I've an issue when getting data in from my linux to Splunk Observability. So i've ubuntu 23 that is ha...
by nz_021 Explorer in Installation 08-06-2024
0 0
0
0
Priyavit
 below is error, how to fix this?2024-08-05 21:46:52,757 ERROR pid=2311415 tid=MainThread file=base_modinput.py:log_e...
by Priyavit New Member in Getting Data In 08-06-2024
0 0
0
0
jsk33
null
by jsk33 New Member in Installation 08-05-2024
0 0
0
0
rahamadmahamad
Hi Team,We are trying to upgrade Splunk OpenTelemetry Collector to the version v0.104. So, we wanted to know its comp...
by rahamadmahamad New Member in Installation 08-05-2024
0 0
0
0
raiqb01
I have following search. how can I add indexes information in the results:|tstats max(_time) as _time, where index=wi...
by raiqb01 Engager in Monitoring Splunk 08-05-2024
0 3
0
3
Be_JAR
Hi all.We have several synthetics in a splunk Obervability cloud and I want to add their metrics in the Splunk enterp...
by Be_JAR Path Finder in Getting Data In 08-05-2024
0 0
0
0
splunkreal
Hello,Is /debug/refresh enough to reload role capabilities for authorize.conf?Thanks. Splunk entreprise v9
by splunkreal Influencer in Security 08-05-2024
0 3
0
3
refahiati
Hi everyone,I am referring to the documentation on High Availability Clustering Configuration, and I came across the ...
by refahiati Explorer in Installation 08-05-2024
0 1
0
1
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors