Splunk Administration

Splunk Administration
Category Activity
sarlacc
I'm running Splunk Enterprise 9.1.1.  It is a relatively fresh installation (done this year).  Splunk forwarders are ...
by sarlacc Explorer in Getting Data In 07-30-2024
0 6
0
6
Hamsu
I want to use SSO and reverse proxy to skip the login page and go directly to the service app page.I found several re...
by Hamsu Loves-to-Learn Lots in Security 07-30-2024
0 0
0
0
hrawat
If you find issue happens after windows server is restarted. Restarting splunk universal forwarder fixes the issue. T...
by hrawat Splunk Employee Splunk Employee in Knowledge Management 07-30-2024
2 0
2
0
NanSplk01
I am trying to create a sourcetype for a new client:Note StartDate=xxxx is where the log begins.  However the StartTi...
by NanSplk01 Communicator in Getting Data In 07-30-2024
0 5
0
5
syaganti
I finetuned LLM and I want to integrate that with Splunk. In Splunk Dashboard, I am going to include Question/Answeri...
by syaganti Loves-to-Learn Everything in Security 07-30-2024
0 0
0
0
Hiattech
We are in the midst of migrating our Splunk from Ubuntu to RHEL 9 Stigged. Supposedly, this should have been copy pas...
by Hiattech Explorer in Installation 07-30-2024
0 0
0
0
elend
Hi there, now I'm trying some of escu's built-in rules and sending them as notable alerts and via msteams webhooks. H...
by elend Communicator in Security 07-30-2024
0 0
0
0
Marino25
Hello, I am working on a project to integrate Splunk with a LLM model.  I have created an app that search vulnerabili...
by Marino25 Observer in Security 07-30-2024
0 1
0
1
yohhpark
using UF to send json file and below are the props.conf.[test_json]pulldown_type = trueLINE_BREAKER = ([\r\n]+)INDEXE...
by yohhpark Path Finder in Getting Data In 07-30-2024
0 21
0
21
m130carbine
I am wanting to go into the Splunk Web and monitor the USBSTOR in Windows 10.  I am selecting the "New Registry Monit...
by m130carbine Loves-to-Learn Lots in Getting Data In 07-30-2024
0 1
0
1
hrawat
Search Head appears to have a rogue python  process ( appserver.py) that slowly eats away all memory on the system, t...
by hrawat Splunk Employee Splunk Employee in Monitoring Splunk 07-30-2024
0 3
0
3
tuts
Hello everyone, I want the Kerio Control technical guide that provides details on how to set up and configure a Syslo...
by tuts Path Finder in Getting Data In 07-30-2024
1 2
1
2
chandrasekhar46
i have json data but all the data getting in single event not parsing properly each event here is adding the event da...
by chandrasekhar46 Loves-to-Learn Everything in Getting Data In 07-30-2024
0 6
0
6
kaede_oogami
お世話になります。SplunkWebからソースタイプを作成する際にCHARSETの項目から、様々な文字コードを宣言できますが、shift-jis形式の文字コードだけでもSHIFT-JISやSJISなどの複数のパターンが用意されていたと...
by kaede_oogami Explorer in Knowledge Management 07-29-2024
0 1
0
1
thomas_forbes
I have created an app (which includes updates for the inputs.conf, outputs.conf and deploymentclient.conf files), an ...
by thomas_forbes Communicator in Deployment Architecture 07-29-2024
0 5
0
5
Venkat_16
The configurations are perfect and the ping and telnet are working between the deployment server and the client but a...
by Venkat_16 Contributor in Deployment Architecture 07-29-2024
0 8
0
8
sarvesh_11
Hello,I am currently using Splunk UF 7.2 on a Windows Server, and my UF is configured on D Drive.I am getting below e...
by sarvesh_11 Communicator in Getting Data In 07-29-2024
0 3
0
3
sarit_s6
HelloI have one big index with lots of files which I want to reroute logs from there to different indexesThe reroute ...
by sarit_s6 Engager in Getting Data In 07-29-2024
0 12
0
12
OKumolalo
Hello,I am on Windows and am newer to Splunk and I have been doing so learning, so I was getting ready to follow alon...
by OKumolalo Engager in Installation 07-28-2024
0 5
0
5
benmstl
Hello Splunk communityin a nutshell my problem is i have set up splunk and a forwarder on a server, added input and o...
by benmstl New Member in Getting Data In 07-27-2024
0 2
0
2
Abass42
So i have three servers in this Splunk infrastructure, a SH, an Indexer, and a forwarder. I have installed the free 1...
by Abass42 Communicator in Deployment Architecture 07-27-2024
0 8
0
8
jpkelly_2
I am currently running Universal Forwarder 6.6.3 on a Windows 2012 R2 instance. I am attempting to upgrade to 7.1.1,...
by jpkelly_2 New Member in Deployment Architecture 07-26-2024
0 5
0
5
hiddenkirby
when configuring a distributed search ... why when i create a new server on the web interface it asks for a username:...
by hiddenkirby Contributor in Deployment Architecture 07-26-2024
0 3
0
3
splunkreal
Hello, we receive data using _TCP_ROUTING from forwarders from another team using another Splunk cluster.We don't use...
by splunkreal Influencer in Getting Data In 07-26-2024
0 2
0
2
Silah
Hey allI am taking input over TCP by having this in my inputs.conf [tcp://1.2.3.4:123] connection_host = ip index = i...
by Silah Path Finder in Getting Data In 07-26-2024
0 4
0
4
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors