Splunk Administration

Splunk Administration
Category Activity
kobi
Hi allIs there a way to use one deploy server to push app to 2 different search head clusters?for example I have sear...
by kobi Loves-to-Learn Lots in Deployment Architecture 07-09-2024
0 6
0
6
Manjunatha
I have a cisco ess -3300 con switch with 20 1G copper port and 4 1G Fiber cable .My issue is that out of 24 1G port o...
by Manjunatha New Member in Getting Data In 07-09-2024
0 1
0
1
cafissimo
Hello, Please I would like to know if there are best practices to migrate a single search head instance with ITSI to ...
by cafissimo Communicator in Deployment Architecture 07-09-2024
0 0
0
0
andrew_garvin
I am trying to create a setup screen for my app that will store passwords securely and also create a scripted input i...
by andrew_garvin Path Finder in Getting Data In 07-08-2024
4 4
4
4
paulmachin
Hi,  I am working with the Splunk Add on for Microsoft Azure and im trying to get the Secure Score working with it, h...
by paulmachin New Member in Getting Data In 07-08-2024
0 2
0
2
splunktrainingu
Is there a way to monitor disconnects on a host (with a deployed universal forwarder) that cannot reach the Indexer? ...
by splunktrainingu Communicator in Getting Data In 07-08-2024
0 5
0
5
Chiranjeev
I am having issues with action extraction on my windows addon . for example the eventcode 4624 should have an action ...
by Chiranjeev Explorer in Security 07-08-2024
0 6
0
6
sylbaea
Hello, I have a Search Head Cluster configured with SAML authentication (ADFS)... For an existing SAML group (alrea...
by sylbaea Communicator in Security 07-08-2024
0 17
0
17
Haleb
Hi, I created custom input using HEC in distributed environment. When searching, I see that the values ​​for the fiel...
by Haleb Path Finder in Knowledge Management 07-08-2024
0 2
0
2
lucilleddajab
Hi All,This is the first time I encountered this. I have an HF which I have admin access to Splunk, from the server's...
by lucilleddajab Explorer in Installation 07-08-2024
0 7
0
7
tuts
Why is it that every time I set the event under (Security Domain=NETWORK) from the Content Management page, the value...
by tuts Path Finder in Security 07-08-2024
0 0
0
0
jinxkamada
Is it possible to reconfigure Splunk to use _indextime instead of _time for data retention policy?
by jinxkamada Explorer in Monitoring Splunk 07-08-2024
0 5
0
5
gcusello
Hi at all,I have a new doubt about the sequence of activities during indextime.I have a data flow, arriving from HEC ...
by SplunkTrust SplunkTrust in Getting Data In 07-07-2024
0 4
0
4
ques_splunk
Hello, I did the splunk ES installation following all the steps noted here - https://docs.splunk.com/Documentation/ES...
by ques_splunk Explorer in Installation 07-07-2024
0 8
0
8
kannu
Hello All , Greetings   I am looking for perfect explanation of memk() function used with convert statement , how it ...
by kannu Communicator in Knowledge Management 07-07-2024
0 2
0
2
vimselva
I have tried to solve this problem with all the combinations, but missing some key thing on how to resolve.I have var...
by vimselva Explorer in Getting Data In 07-07-2024
0 6
0
6
Domingmr
Hello, new to splunk. I am trying to exclude certain applications in an SPL search, specifically by app name.  What f...
by Domingmr New Member in Deployment Architecture 07-07-2024
0 1
0
1
Roy_9
Hello,Anyone has experience configuring Splunk DBconnect with informix database?  Do we need to install the drivers e...
by Roy_9 Motivator in Getting Data In 07-07-2024
0 1
0
1
AliMaher
Hi,I hope all is well. I have struggled with Data Model Concept as I seek to know why and When we use the data model ...
by AliMaher Path Finder in Knowledge Management 07-06-2024
0 5
0
5
sreenut
While monitoring Real User Monitoring, should the performance of the web application deteriorate for any reason, we w...
by sreenut New Member in Monitoring Splunk 07-06-2024
0 0
0
0
BRFZ
Hello, I want to collect logs from a machine that is set to French. Consequently, the logs are generated in French, m...
by BRFZ Communicator in Getting Data In 07-06-2024
0 2
0
2
tomtom0030
The print server OS is Windows Server 2019 I would like to get PrintService-Admin log to Splunk.I tried the following...
by tomtom0030 Loves-to-Learn in Getting Data In 07-06-2024
0 1
0
1
jbsplunk
01-24-2012 17:35:39.483 -0800 ERROR SSLCommon - Can't read key file /opt/splunk/etc/auth/server.pem errno=101077092 e...
by jbsplunk Splunk Employee Splunk Employee in Security 07-04-2024
4 8
4
8
Navanitha
I have Splunk SH Cluster ( 3 SH's in Cluster)  and we are collecting Checkpoint logs using Syslog and then Splunk HF ...
by Navanitha Path Finder in Knowledge Management 07-04-2024
0 7
0
7
qzy
Hi folks,I am trying to get Defender logs into the  Splunk Add-On for Microsoft Security but I am struggling a bit.It...
by qzy Observer in Getting Data In 07-04-2024
0 2
0
2
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors