Splunk Enterprise

Community Activity

Does _internal report the expiration date of the certificate? We are in the process of updating the certificates and we go manually to check each one via the browser whether the c... by danielbb Motivator in Splunk Enterprise 08-13-2025 0 5	0	5
Issue with kvstore in version 9.4.3 Having issue with starting kvstore on 9.4.3 on RHEL8.x Error seen:ERROR CertStorageProvider [1067727 KVStoreConfigura... by sushilkar Explorer in Splunk Enterprise 08-13-2025 0 10	0	10
Supervisor error I upgraded Splunk Enterprise to 10.0.0, but the supervisor is not running.Checked the server.conf the supervisor is e... by Kevin0202 Engager in Splunk Enterprise 08-12-2025 0 4	0	4
How do I enable mTLS for the replication port on a Search Head Cluster? Please share your knowledge.Splunk 9.4referencehttps://docs.splunk.com/Documentation/Splunk/9.4.2/Admin/ServerconfI'm... by OGS Explorer in Splunk Enterprise 08-11-2025 0 4	0	4
Attempting to revert the SPLUNK_HOME ownership? This happens regardless of it I am installing fresh or upgrading to version 9.1.0.1an existing install. Every action ... by Skeer-Jamf Path Finder in Splunk Enterprise 08-11-2025 1 7	1	7
Why is my log routing via props.conf and transforms.conf not working? Route logs from combined_large.log to webapp1_index or webapp2_index based on log content ([webapp1] or [webapp2]).Se... by Shakeer_Spl Explorer in Splunk Enterprise 08-10-2025 0 5	0	5
[URGENT] All splunk forwarders upgraded to 10.0 version are crashing We upgraded from 9.4.3 to 10.0 and now all the splunk forwarders are crashing because of the splunk-winevtlog service... by hl Path Finder in Splunk Enterprise 08-08-2025 0 1	0	1
No Options for Downloadable PDFs on New Documents Portal We are looking to upgrade our Splunk instance to the latest version. I would like to download install manuals for Sp... by bz1 Engager in Splunk Enterprise 08-07-2025 1 3	1	3
Storage for DB Connect Checkpoint values HiWhere are the Checkpoint values for enabled DB Connect Inputs stored?I did check at folder:/opt/splunk/var/lib/splu... by altink Builder in Splunk Enterprise 08-07-2025 0 9	0	9
Updating splunk to 9.4.4 Hello everyone, could you help me.I have a splunk Heavy Forwarder server, version 8.1.14, it simply forwards data fro... by igor5212 Engager in Splunk Enterprise 08-07-2025 0 10	0	10
Support for OIDC Authentication Method Hello,I would like to know if there are any plans for Splunk to support OIDC (in addition to SAML)If so, is there a r... by stavush New Member in Splunk Enterprise 08-07-2025 0 3	0	3
Need to Splunk UF from 8.2.9 to 9.4.3 in AIX 7.2 Hi All,I need to upgrade the Splunk Universal Forwarder (UF) on AIX 7.2 from version 8.2.9 to 9.4.3. However, after a... by vis1519 Loves-to-Learn in Splunk Enterprise 08-06-2025 0 2	0	2
Show a count of all failures from VPN traffic Query: \| tstats count from datamodel=Network_Sessions.All_Sessions where nodename=All_Sessions.VPN action=failure vpn... by hl Path Finder in Splunk Enterprise 08-06-2025 0 5	0	5
Metric dimension truncation - 2048 character limit I'm trying to ingest some metrics with very long attribute values and the length of "<dim_name>::<dim_value>" seems t... by tlopes Engager in Splunk Enterprise 08-06-2025 0 2	0	2
Filtering out logs based on sourcetype I'm at a loss and hoping for an assist. Running a distributed Splunk instance, I used the Deployment Server to push p... by jessieb_83 Path Finder in Splunk Enterprise 08-05-2025 0 6	0	6
How to deal with extremely long values in table view? Hello everyone!I'm trying to create a table view of IIS logs.The main issue I've encountered is some very long URL fi... by NoSpaces Contributor in Splunk Enterprise 08-05-2025 0 7	0	7
Monitoring Trellix log I have a requirement to monitor log files created by Trellix on my windows 11 and 2019 hosts. The log files are locat... by sswigart Explorer in Splunk Enterprise 08-04-2025 0 6	0	6
Upgrade Issue with Splunk Forwarder v10.0.0.0 on Windows 10 (32-bit) Hello team,We are currently testing the upgrade of Splunk Universal Forwarder (x86) version 10.0.0.0 on a Windows 10 ... by Meta Loves-to-Learn in Splunk Enterprise 08-03-2025 0 4	0	4
Splunk Indexes data pointing to different storage Hi there,I want to point the secondary storage of my splunk indexer to mix with another storage, like point it to clo... by elend Communicator in Splunk Enterprise 08-01-2025 0 5	0	5
AWS cloudwatch logs to splunk on prem We have logs already in CloudWatch. What is the best way to take the logs from cloudwatch to splunk on prem.We have a... by Narendra_Rao Loves-to-Learn Lots in Splunk Enterprise 07-31-2025 0 1	0	1
dott chart Hi, can anybody help to create dott chart?x-axis: _timey-axis: points of values of fields: tmp, min_w, max_wHere is t... by spisiakmi Contributor in Splunk Enterprise 07-31-2025 0 3	0	3
Emails going into Junk folder Hi team, I am in splunk 9.4 and have configured db connect. The SQL query will search for any failures from the table... by Namo Explorer in Splunk Enterprise 07-30-2025 0 7	0	7
compare 2 lookups contents Hi, any support please.I have 2 lookups.tmp1_1.csvWorkplaceId,PK1,Description,Contract1234567890,7535712,Contract1,19... by spisiakmi Contributor in Splunk Enterprise 07-30-2025 0 2	0	2
how to push apps from DS to CM ? Hello Experts , I have never done this and wonder if there is a best way to achieve below I want to use DS to push in... by vikasg Loves-to-Learn Lots in Splunk Enterprise 07-28-2025 0 3	0	3
Unable to initialize modular input "server" defined in the app "splunk_app_db_connect": Introspecting scheme=server: scr Windows server 2022I have tried installing JRE24 and Java 8. It doesn't let me save the JAVA_HOME path. Throw below e... by Gagandeep Explorer in Splunk Enterprise 07-26-2025 0 7	0	7