Splunk Administration

Splunk Administration
Category Activity
4mouse
thanks to read and have a good day 1. we makes lookup file to use CSV File (in test enviroment), after then copy&pas...
by 4mouse Engager in Deployment Architecture 07-25-2024
0 1
0
1
pavithra
Hi All,Data is not getting indexed after adding the conf
by pavithra Explorer in Getting Data In 07-25-2024
0 3
0
3
sakthiganesht
Dears, I am in the process of setting up a cluster environment. In the process while firing some commands on search h...
by sakthiganesht Explorer in Deployment Architecture 07-25-2024
0 4
0
4
oreoshake
I have log files with color codes and control characters that we'd like to strip because they clutter the search resu...
by oreoshake Communicator in Getting Data In 07-25-2024
1 9
1
9
Egyas
I have a current Splunk install in my production environment, all running RedHat Linux.  I have a single server w/ Sp...
by Egyas Explorer in Installation 07-25-2024
0 13
0
13
JohnEGones
(Hard sometimes to think of a good salutation that isn't boring or awkward, so fill in what you like here.),I acciden...
by JohnEGones Communicator in Knowledge Management 07-25-2024
0 0
0
0
DoubleAka
How can I cut some parts of my message prior to index time?I tried to use both SEDCMD and transform on raw messages b...
by DoubleAka Observer in Getting Data In 07-25-2024
0 4
0
4
Kekoa
After rebuilding the docker image of DBConnect it requires a restart of the container in order to start showing data ...
by Kekoa Observer in Installation 07-25-2024
0 0
0
0
Gil
Hi, in our organization we use wef to monitor windows. we configure an inputs.conf for monitoring from the Event view...
by Gil Explorer in Getting Data In 07-25-2024
0 8
0
8
akira_splunk
We have a Splunk deployment in AWS and have our Search Head Cluster front-ended with an ALB (not ELB). Users frequent...
by akira_splunk Splunk Employee Splunk Employee in Deployment Architecture 07-25-2024
4 11
4
11
msalghamdi
Hello Splunkersi have clustered splunk 9.2.1 on prem, i have pushed an app from the CM to search head cluster and try...
by msalghamdi Path Finder in Getting Data In 07-24-2024
0 2
0
2
c86
HelloI am building an app using the Splunk Add-on builder. Can I use the helper.new_event method in order to send a m...
by c86 Loves-to-Learn in Getting Data In 07-24-2024
0 0
0
0
Nicolas2203
Hello,Just have a question, about a test that I have in progress.I have one indexer cluster, with two servers.I decid...
by Nicolas2203 Path Finder in Deployment Architecture 07-24-2024
0 6
0
6
atr
I have installed Splunk Enterprise on an RHEL9 VM in AWS. I have tried installing via TAR and RPM. I also tried start...
by atr Explorer in Installation 07-23-2024
0 5
0
5
Lionel
I just realized that I lost the Admin password and I need a way to access the system, with my Admin credentials.
by Lionel Splunk Employee Splunk Employee in Security 07-23-2024
47 40
47
40
splunkreal
Subject moved to https://community.splunk.com/t5/All-Apps-and-Add-ons/Solution-Splunk-Enterprise-Security-ES-incident...
by splunkreal Influencer in Getting Data In 07-23-2024
0 1
0
1
jcorcorans
linux logs only showing epoch time - how to convert epoch time upon ingestion in props/trans ?is there a way or a con...
by jcorcorans Explorer in Getting Data In 07-23-2024
0 1
0
1
derchrischkya
Hey Splunkers,is there any way to use "Realname" and "Mail" within ProxySSO setup?We are using ProxySSO for authentic...
by derchrischkya Engager in Deployment Architecture 07-23-2024
0 0
0
0
senthilkumar76
Hello, I invoke the rest webservice from Alert webhook which works fine for unsecured webservice calls. But it fails ...
by senthilkumar76 Engager in Security 07-23-2024
0 1
0
1
Nawab
We are using a clustered index environment and want to use NAS as our cold storage. I mapped NAS to a local folder fo...
by Nawab Communicator in Getting Data In 07-23-2024
0 2
0
2
sc3
Hello, We are interested in capturing Microsoft Teams PSTN call records.  There is a Microsoft Graph API  with specif...
by sc3 New Member in Getting Data In 07-23-2024
0 2
0
2
KhalidAlharthi
I have a problem with data it's self and i have 2RF 2SF and they are works fine i tried to roll buckets multiple time...
by KhalidAlharthi Explorer in Monitoring Splunk 07-22-2024
0 2
0
2
BRFZ
Hello,I installed the forwarder on a Windows machine, and during the installation, I selected the Windows performance...
by BRFZ Communicator in Monitoring Splunk 07-22-2024
0 1
0
1
aruncp333
How can I create alerts based on this app data received using API? How this app https://splunkbase.splunk.com/app/696...
by aruncp333 Explorer in Security 07-22-2024
0 1
0
1
Rizqi_Iskandar
Hello everyone, im new in Splunk and still need a lot to know.I want to ask question, how to forward data in JSON for...
by Rizqi_Iskandar Loves-to-Learn Lots in Getting Data In 07-21-2024
0 4
0
4
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors