Splunk Administration

Splunk Administration
Category Activity
jkamdar
Recently, I installed new Splunk Enterprise 9.2.1 (on-prem) on RHEL8 server and have installed Universal Forwarders o...
by jkamdar Communicator in Getting Data In 07-12-2024
0 10
0
10
Moldy
Trying to create a search that will show which capabilities a user has used within the last year.
by Moldy Engager in Security 07-12-2024
0 2
0
2
SplunkExplorer
Hi Guys, we have a doubt reagarding the user that execute Splunk on a linux environment.Until now, we have always avo...
by SplunkExplorer Contributor in Security 07-12-2024
0 2
0
2
karn
I would like to disable some local accounts temporary. I cannot find disable or suspend button in access controls set...
by karn Path Finder in Security 07-12-2024
0 3
0
3
sintjm
i have a search in my query where i spool data from an API but then the collect command does not allow me to save the...
by sintjm Path Finder in Getting Data In 07-12-2024
0 15
0
15
AkhilSreek
Hey ,Just heard about CVE-2024-5535 on splunkforwarder agent 9.0.9 for Openssl 1.0.2zj , Is this a real one ? Do we n...
by AkhilSreek New Member in Security 07-11-2024
0 1
0
1
kcarsten
I am unable to find and add-on or app in Splunkbase for getting ScienceLogic events into Splunk.  Does anybody have a...
by kcarsten Engager in Getting Data In 07-11-2024
0 1
0
1
BRFZ
Hello,I have successfully configured the Splunk Universal Forwarder on a Windows machine to send WinEventLog: System,...
by BRFZ Communicator in Getting Data In 07-11-2024
0 3
0
3
Kwabena13
I am trying to ingest Linux logs into Splunk. 1. I have deployed the unix_TA through the deployment server to the Hea...
by Kwabena13 Engager in Getting Data In 07-11-2024
0 6
0
6
amitjaywantsplu
Hi, I have Splunk 8.0.0 on AWS with a clustered indexer set up (1 Master and 4 indexers) and I have deployed custom ...
by amitjaywantsplu Engager in Getting Data In 07-11-2024
1 3
1
3
SplunkDash
Hello.I have some issues with field parsing for the CSV files using props configuration. I should be getting 11 field...
by SplunkDash Motivator in Security 07-11-2024
0 6
0
6
BTrust
I have this most wired situation, where I use inputs.conf on the UF:   [monitor://C:\Users\xxx\OneDrive - xxx\xxx\Sou...
by BTrust Path Finder in Getting Data In 07-11-2024
0 3
0
3
SplunkExplorer
Hi Splunkers, today I have a strange situation that require a well done data sharing by my side, so please forgive me...
by SplunkExplorer Contributor in Deployment Architecture 07-11-2024
0 2
0
2
Sepe
Our scenario in new deployment:One indexer server (Windows) (+one separate Windows server as search head)One SC4S in ...
by Sepe New Member in Getting Data In 07-11-2024
0 1
0
1
BlueQ
Bit of a reverse error here, splunk is working when it shouldn't.I followed these instructions to run Splunk as non-r...
by BlueQ Explorer in Getting Data In 07-10-2024
0 6
0
6
pineapplebun-kw
docker-compose.yml :  version: '3.9' services: splunk: image: splunk/splunk:latest environment: ...
by pineapplebun-kw Engager in Installation 07-10-2024
1 4
1
4
jcorcorans
Is there a Regex to convert the epoch to human readable time upon ingestion ?  [1720450799] Error: Got check result f...
by jcorcorans Explorer in Getting Data In 07-10-2024
0 4
0
4
NReddy12
I've installed Splunk Universal Forwarder 9.1.0 on a Linux server and configured batch mode for data log file monitor...
by NReddy12 Loves-to-Learn Lots in Getting Data In 07-10-2024
0 4
0
4
maxruas
Hi all, I am monitoring a CSV file that has multiple lines and using a pipe as the delimiter: I want to brake them to...
by maxruas Loves-to-Learn Lots in Getting Data In 07-10-2024
0 1
0
1
verbal_666
As in object.Migration UF from 8.x to 9.x creates by itsself a Systemd Unit File!I do not want it, in first "restart"...
by verbal_666 Builder in Installation 07-10-2024
0 0
0
0
nabhosal
What capabilities I need to give to particular user on master node in order to view monitoring console? Right now I ...
by nabhosal New Member in Security 07-10-2024
0 9
0
9
NoamP
Hey,I would love to get helpI want to build a query to be a rule that will monitor DNS requestsI work with two INDEXE...
by NoamP New Member in Monitoring Splunk 07-10-2024
0 2
0
2
darshm
Hi folks,I have a use case where I am having different types of events in a single sourcetype. I want to apply differ...
by darshm New Member in Getting Data In 07-10-2024
0 3
0
3
Med_Ryad
Hello everyone, I am looking for a way to assign values to variables in order to avoid repetition in my query. I want...
by Med_Ryad Engager in Getting Data In 07-10-2024
0 4
0
4
baiden
0
6
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors