| | Hi,I am trying to understand the best/cost effective approach to ingest logs from Azure AKS in Splunk Enterprise with... 1 2 | 1 | 2 | |
| | Hi Team,Please help me whit the steps to enable boot start of Splunk forwarder on oracle Linux 6.x.Splunk forwarder v... 0 2 | 0 | 2 | |
| | HiI have a use case that involves copying historical data from a 3-indexer cluster (6 months old) to another machine.... 0 0 | 0 | 0 | |
| | I cannot renew my developer license according https://dev.splunk.com/enterprise/dev_license/. I get the same error co... 0 3 | 0 | 3 | |
| | Hello Splunk Community, I'm encountering an issue with ingesting data from a Prometheus remote_write_agent into Splun... 0 0 | 0 | 0 | |
| | I am practicing my attacks on the DVWA webserver and I would want to monitor the traffic logs from the DVWA into my s... 0 0 | 0 | 0 | |
| | I am analyzing some .csvs which have a "date" field present. The .csvs are indexed, but the index time is pretty irre... 0 3 | 0 | 3 | |
| | Assume for the moment that these work individually:Outputs1[tcpout]defaultGroup = primary_indexersforceTimebasedAutoL... 0 1 | 0 | 1 | |
| | I'm a bit new to Splunk; apologies if I miss anything obvious.I'm looking to selectively block events meeting a certa... 0 1 | 0 | 1 | |
| | Hello All, I am getting the message in SH The searchhead is unable to update the peer information. Error = 'Unable to... 0 2 | 0 | 2 | |
| | Hello,Is it possible to define the retention duration of logs (hot, warm and cold) If yes, how can this be done ? Or... 0 1 | 0 | 1 | |
| | my SAML Response to Splunk. <?xml version="1.0" encoding="UTF-8" standalone="no"?><samlp:Response xmlns:samlp="urn:oa... 0 0 | 0 | 0 | |
| | It says, "If you save your IdP certificate under $SPLUNK_HOME/etc/auth/idpCerts, please leave it blank." If you don't... 0 0 | 0 | 0 | |
| | Hi all,I am currently testing the Http Event Collector (HEC) with a Splunk Cloud trial account. All I do is post data... 0 4 | 0 | 4 | |
| | Hi Team, I have a field extraction and a calculated field which is not workingPlease let me know whether there is an... 0 1 | 0 | 1 | |
| | Hi all,We are indexing different topics from our kafka cluster to an index say, index1. But we now have a requirement... 0 1 | 0 | 1 | |
| | I had defined the complete path in inputs.conf and restarted the Splunkforwarder but got error in Splunkd logs.Kindly... 0 4 | 0 | 4 | |
| | since moving to 9.2.1, now my df.sh events are now a single event when searching. also notice the format is bad when ... 0 0 | 0 | 0 | |
| | Hello all,I need to configure SAML/SSO with Splunk but i m having the following issues:- I have 3 search heads in a c... 0 0 | 0 | 0 | |
| | I'd like to monitor log files and ingest specific lines from these files. My props.conf and transforms.conf has no er... 0 2 | 0 | 2 | |
| | Hi ,How to collect server logs without installing the Splunk Universal forwarder. Because the server owned team is no... 0 3 | 0 | 3 | |
| | Hi,I want to learn the Splunk Enterprise Security from scratch could anyone pls share the links?Thanks. 0 3 | 0 | 3 | |
| | I was under the impression that port 8089 is used to manage the apps on your endpoints using the Settings > Forwarder... 0 6 | 0 | 6 | |
| | I have this question as a reference: Splunk Question I have one indexer, SH, and one forwarder. At some point, I had ... 0 2 | 0 | 2 | |
| | | 0 | 0 | |
