Splunk Enterprise

Community Activity

	Requesting Help: Sending Event Data from Splunk to Elasticsearch via Kafka Hello Splunk community! I’m planning a project that involves sending event data from Splunk to Elasticsearch using K... by kn450 Explorer in Splunk Enterprise 10-29-2025 0 4	0	4
	Search History not loading on one node I've currently got an issue where my search history wont load on one particular search head. As far as I know, it's o... by PapayaPower Observer in Splunk Enterprise 10-29-2025 0 0	0	0
	Heavy Forwarder server unable to list established port 9997 from universal forwarder by kirkip Observer in Splunk Enterprise 10-29-2025 0 1	0	1
	Problem with DEPLOYMENT after downgrading from 9.4.x to 9.1.9 Hi there.I got a really hard problem after updating to 9.1.9.DS completely broke, can't manage it anymore.Is there a ... by verbal_666 Builder in Splunk Enterprise 10-28-2025 0 13	0	13
	Splunk ES Not Generating Notable Events from BOTSv1 (nessus, suricata) Data I am trying to test Splunk Enterprise Security (ES) by feeding it sample data, but I am unable to get any Notable Eve... by woo Explorer in Splunk Enterprise 10-28-2025 0 1	0	1
	Can we migrate the configurations from DB Connect 3.2.0 to 4.1.1? We’re planning to upgrade DB Connect from 3.2.0 and want to confirm if existing configurations (identities, connectio... by danielbb Motivator in Splunk Enterprise 10-27-2025 0 1	0	1
	How can I find the list of Splunk versions that are compatible with Red Hat 9.6? Where can I find the Splunk version compatibility list for RHEL 9.6? by woo Explorer in Splunk Enterprise 10-27-2025 0 2	0	2
	Splunk Entreprise Max Upload issue Hello Folks,I am currently using Splunk Entreprise10.0.0 on ubuntu , I am trying to upload an app manually but it tol... by fedayn05 Path Finder in Splunk Enterprise 10-27-2025 0 11	0	11
	9.4.5: SearchHead Cluster csv notification!!! Hello.Installed today a little environment with 3 SHs in Clustered ENV with a full clean 9.4.5 installation.The first... by verbal_666 Builder in Splunk Enterprise 10-27-2025 0 7	0	7
	can't start splunkweb My splunkweb can't start and on web_service.log show:2025-10-24 15:53:53,423 ERROR [68fb3e92b912c89de7070] root:764 -... by Jcath Loves-to-Learn Lots in Splunk Enterprise 10-27-2025 0 4	0	4
	How to get data from splunk with REST API? Hey together, I'm trying to fetch data from splunk via REST API in a react application.When I try to create a search ... by Janis Engager in Splunk Enterprise 10-26-2025 0 6	0	6
	How to get SharePoint online list data to Splunk Enterprise? can anyone share me how to get data from SharePoint Online List to Splunk Enterprise. I have to get user custom actio... by Fingent Observer in Splunk Enterprise 10-25-2025 0 3	0	3
	Search head taking too much CPU, slowing down machine Hello,My installation is the following: a cluster of three search head and three indexer all set on different server ... by Florent Observer in Splunk Enterprise 10-23-2025 0 3	0	3
	Issue with notable index retention kept for 180 days but saving logs for 90 days Dear,The issue with the notable index, we have configured the notable index with 18 mnths retention period and also m... by Mohammed123 Loves-to-Learn Everything in Splunk Enterprise 10-22-2025 0 3	0	3
	Sysmon events not being parsed — stuck as xmlwineventlog even with TA-microsoft-sysmon installed As i am struggling to solve this issue since 3 days. Need help in solving this ASAP, tried everything used GenAI tool... by GuruDayal Engager in Splunk Enterprise 10-22-2025 0 5	0	5
	Splunk shows only 9 months (270 days) data- How do I increase the retention period? Hi Everyone, I got a strange issue and unable to find a fix. All the indexes have a longer retention period but the o... by spodda01da Path Finder in Splunk Enterprise 10-21-2025 0 12	0	12
	Splunk Enterprise MCP Access & Hosting Has anyone successfully deployed MCP server with Splunk Enterprise in a production environment?If so how would you ha... by Narendra_Rao Loves-to-Learn Lots in Splunk Enterprise 10-21-2025 0 2	0	2
	Universal Forwarder Central Upgrade Server Hi all.I really did never understand WHY Splunk Developments never take in mind to develop a Central Upgrader/Downgra... by verbal_666 Builder in Splunk Enterprise 10-21-2025 0 13	0	13
	Getting data in Hi,I have a scenario where the heavy forwarder queue gets filled and data doesn't appear quickly in Splunk when the i... by _pravin Contributor in Splunk Enterprise 10-20-2025 0 2	0	2
	Typo Found in "Edit server Classes" page in Splunk 10.0.1 (Server Class Management) Hi Splunk Community,I found a minor typo on the "Edit server Classes" page in Splunk Enterprise version 10.0.1.Locati... by mtc9003 Loves-to-Learn in Splunk Enterprise 10-20-2025 0 2	0	2
	Why is there Forwarder Ingestion Latency Error? I have splunk instance with 9.0.3 version and my splunk keeps throwing error in Forwarder Ingestion Latency with Root... by nz_021 Explorer in Splunk Enterprise 10-18-2025 0 5	0	5
	Deploying DB Connect in a search head cluster. I have a splunk distributed system with 3 indexers, 3 search heads, a manger, and 2 heavy forwarders. I am attemptin... by cdevoe57 Path Finder in Splunk Enterprise 10-16-2025 0 4	0	4
	issue on splunk deployment server forwarder manager hi , in my company we are using splunk enterprise in cluster struct , i recently update my servers not splunk after t... by julianaa85 New Member in Splunk Enterprise 10-15-2025 0 1	0	1
	Lock Lab Hello good afternoon, I am working on my lab. I tried to login, but this is what I am seeing. Can anybody help me?For... by Justina New Member in Splunk Enterprise 10-15-2025 0 1	0	1
	Splunk Forwarder not sending data from domain controller server Hi ,I want to sent the application, system and security logs from the domain controller server to the main Splunk ser... by ITGSOC Engager in Splunk Enterprise 10-14-2025 0 3	0	3