Splunk Administration

Splunk Administration
Category Activity
ww9rivers
Based on documentation, and posts (Who do saved scheduled searches run as? and  Question about "run as" (Owner or Use...
by ww9rivers Contributor in Security 06-18-2024
0 2
0
2
Namo
I am new to splunk and  observing the event count and current size showing a 0, even though we can search on the inde...
by Namo Explorer in Getting Data In 06-18-2024
0 2
0
2
adrifesa95
I can not access to Security Content dashboard because I recieve this message: 
by adrifesa95 Engager in Deployment Architecture 06-18-2024
0 1
0
1
rtkelly
We are trying to run a report that groups data by the UTC date of events occur. Our Heavy forwarders collect the data...
by rtkelly Explorer in Getting Data In 06-18-2024
0 7
0
7
Poojitha
Hi All,  TagData [ [-] { [-] Key: Application Value: Test_App } { [-] Key: Email ...
by Poojitha Communicator in Getting Data In 06-18-2024
0 3
0
3
Siddharthnegi
Let say I have 2 lookup files , lookup1  has 50 values and other have 150 valuesso when I inner join  lookup1 to look...
by Siddharthnegi Contributor in Getting Data In 06-18-2024
0 1
0
1
aleckostiner123
I'm trying to get bitlocker events into Splunk. Below is what I have in the inputs.conf and it appears to not be work...
by aleckostiner123 New Member in Getting Data In 06-17-2024
0 1
0
1
mykol_j
v9.2.0.1Monitoring Console in Splunk manager is not displaying volume information. All panels say "Search is waiting ...
by mykol_j Communicator in Monitoring Splunk 06-17-2024
0 5
0
5
gruby_bolek
I installed Snort 3 JSON Alerts add-on. I made changes in inputs.conf (/opt/splunk/etc/apps/TA_Snort3_json/local) lik...
by gruby_bolek Explorer in Getting Data In 06-17-2024
0 4
0
4
corti77
Hi,Following the official instructions https://apps.splunk.com/apps/id/Splunk_TA_microsoft_sysmon , Splunk Add-on for...
by corti77 Contributor in Getting Data In 06-17-2024
0 4
0
4
jacknguyen
HI guys,I try to add new license Splunk on WebUI and CLI, Both Failed.On CLI, I see error/opt/splunk/etc/licenses/ent...
by jacknguyen Path Finder in Installation 06-17-2024
0 4
0
4
wxlcba
I've created the HF, and set up the ip allow list. From the Azure Connection troubleshoot, the testing is successful,...
by wxlcba Loves-to-Learn in Getting Data In 06-17-2024
0 2
0
2
Siddharthnegi
i want to get list of scheduled saved searches with the name and the searches itself. can anybody help?
by Siddharthnegi Contributor in Getting Data In 06-17-2024
0 2
0
2
smalonso
Hello, I'm trying to learn how to create Splunk applications and as I'm starting I'm following the tutorial in: htt...
by smalonso Explorer in Installation 06-16-2024
0 9
0
9
DarkMSTie
Hey all super new to splunk administration - I'm having issues with the bro logs being indexed properlyI have 2 days ...
by DarkMSTie New Member in Getting Data In 06-16-2024
0 1
0
1
AtherAD
The purpose of this query is to create legacy diagrams of how the search head works in Splunk. I want to know the int...
by AtherAD Engager in Getting Data In 06-15-2024
0 1
0
1
Narendra_Rao
I'm currently working on integrating Splunk with AWX to monitor Ansible automation jobs. I'm looking for guidance on ...
by Narendra_Rao Loves-to-Learn Lots in Installation 06-15-2024
0 1
0
1
priyanka2887
Hi Team,Can we compress the logs using Splunk HEC HttpEventCollectorLogbackAppender? Please guide here, how to compre...
by priyanka2887 New Member in Getting Data In 06-15-2024
0 1
0
1
Abass42
I have been working on our Splunk Dev environment, and since then, I have reinstalled and uninstalled Splunk many tim...
by Abass42 Communicator in Installation 06-14-2024
0 1
0
1
SamHelp
There are two heavy forwarders at our site.  The current setup is that there is a VIP defined for client server acces...
by SamHelp New Member in Getting Data In 06-14-2024
0 2
0
2
ivarny
The transforms to set sourcetypes has a bug.The regex uses a capture group that is not used in the format statment.Wh...
by ivarny Path Finder in Knowledge Management 06-14-2024
1 0
1
0
keyu921
Hi All, From Splunk article, I know it supporting using docker / portainer hosting.Would like to check whether Spunk ...
by keyu921 Explorer in Installation 06-14-2024
0 0
0
0
agodoy
Is this documented anywhere? I noticed that one of my scripted alerts stopped working once the owner account was del...
by agodoy Communicator in Knowledge Management 06-14-2024
1 8
1
8
Siddharthnegi
We had a Nessus scan but Nessus configuration was not completed on tenable add-on on the splunk side. Hence we missed...
by Siddharthnegi Contributor in Getting Data In 06-14-2024
0 1
0
1
Aqibrehman1
Hi, I'm not able to integrate SPlunk with Nozomi, with the available app (Nozomi Networks Universal Add-on), on the o...
by Aqibrehman1 Loves-to-Learn in Getting Data In 06-14-2024
0 1
0
1
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors