Splunk Enterprise

Community Activity

	Monitoring Trellix log I have a requirement to monitor log files created by Trellix on my windows 11 and 2019 hosts. The log files are locat... by sswigart Explorer in Splunk Enterprise 08-04-2025 0 6	0	6
	Upgrade Issue with Splunk Forwarder v10.0.0.0 on Windows 10 (32-bit) Hello team,We are currently testing the upgrade of Splunk Universal Forwarder (x86) version 10.0.0.0 on a Windows 10 ... by Meta Loves-to-Learn in Splunk Enterprise 08-03-2025 0 4	0	4
	Splunk Indexes data pointing to different storage Hi there,I want to point the secondary storage of my splunk indexer to mix with another storage, like point it to clo... by elend Communicator in Splunk Enterprise 08-01-2025 0 5	0	5
	AWS cloudwatch logs to splunk on prem We have logs already in CloudWatch. What is the best way to take the logs from cloudwatch to splunk on prem.We have a... by Narendra_Rao Loves-to-Learn Lots in Splunk Enterprise 07-31-2025 0 1	0	1
	dott chart Hi, can anybody help to create dott chart?x-axis: _timey-axis: points of values of fields: tmp, min_w, max_wHere is t... by spisiakmi Contributor in Splunk Enterprise 07-31-2025 0 3	0	3
	Emails going into Junk folder Hi team, I am in splunk 9.4 and have configured db connect. The SQL query will search for any failures from the table... by Namo Explorer in Splunk Enterprise 07-30-2025 0 7	0	7
	compare 2 lookups contents Hi, any support please.I have 2 lookups.tmp1_1.csvWorkplaceId,PK1,Description,Contract1234567890,7535712,Contract1,19... by spisiakmi Contributor in Splunk Enterprise 07-30-2025 0 2	0	2
	how to push apps from DS to CM ? Hello Experts , I have never done this and wonder if there is a best way to achieve below I want to use DS to push in... by vikasg Loves-to-Learn Lots in Splunk Enterprise 07-28-2025 0 3	0	3
	Unable to initialize modular input "server" defined in the app "splunk_app_db_connect": Introspecting scheme=server: scr Windows server 2022I have tried installing JRE24 and Java 8. It doesn't let me save the JAVA_HOME path. Throw below e... by Gagandeep Explorer in Splunk Enterprise 07-26-2025 0 7	0	7
	Rebuild and Migrate Splunk Enterprise to another different site Hi, I have saw there are many recommendations to rebuild and migrate with its existing data and configuration.It abit... by ws Path Finder in Splunk Enterprise 07-25-2025 0 5	0	5
	Feature-Request: Add proxy-server for not directly connectecd SH Is it possible to implement the possibility to use a proxy url to download the vendor oui-file?Thanks by LoMueller Explorer in Splunk Enterprise 07-24-2025 0 3	0	3
	Splunk Add-on for Microsoft Windows installed on Linux server. I am standing up a Linux server to host Splunk Enterprise 9.4.3.I have 30+ windows hosts. Can I upload Splunk Add-on... by sswigart Explorer in Splunk Enterprise 07-24-2025 0 4	0	4
	Splunk links without language locale leads to broken urls Hello Community,when we try to open a link to a Splunk Url without language setting, e.g. via the "Show results"-link... by Sahansral Loves-to-Learn Lots in Splunk Enterprise 07-24-2025 0 4	0	4
	Deployment Manager フォワーダー管理でエージェントが表示されないご教授ください。Linuxでsplunk（9.4.3）の構築を学習中です。WebUIのフォワーダー管理でエージェントが表示されない状態です。解決策をご存知ないでしょうか。Deployment ServerはLicense Manage... by OGS Explorer in Splunk Enterprise 07-23-2025 0 0	0	0
	splunk 9.4.3 docker image failed to start Hello,I start splunk 9.4.3 as a docker container from the image registry.hub.docker.com/splunk/splunk:latest.However,... by dbloms Explorer in Splunk Enterprise 07-23-2025 0 5	0	5
	Splunk to force the date of events with current date instead of file date Hi Everyone,Please help me regarding this ask - i need the splunk to show the respective events with the current date... by Raja_Selvaraj Explorer in Splunk Enterprise 07-23-2025 0 4	0	4
	Is There an Easy Guide to Create a Custom Alert Action to Run a Batch File or PowerShell Script I don't understand why the legacy 'run a script' alert action has been deprecated. The official guidelines to create... by Salvador_Dalí Loves-to-Learn in Splunk Enterprise 07-23-2025 0 4	0	4
	Eval Expression filter ingestion actions I am ingesting data from the Splunk Add on for O365. I want to use the Eval Expression filter within an ingestion act... by vishalduttauk Communicator in Splunk Enterprise 07-22-2025 0 6	0	6
	Universal Forwarders not showing up after a while from forwarder management on deployment server Hi all,Multiple universal forwarders are installed on both Windows and Linux, and they work fine. The deployment serv... by moriteza New Member in Splunk Enterprise 07-21-2025 0 3	0	3
	Best Practices for Keeping Lookup Files Continuously Up-to-Date for Reliable Alert Context Hi Splunk Community,I'm looking for guidance on how to properly manage and organize lookup files to ensure they are a... by Haleb Path Finder in Splunk Enterprise 07-18-2025 0 1	0	1
	Remove field-value from multivalue I have this table for example Field1 \| Field2Value1 \| value1 value2 value3 Field2 is mvI want to remove the value th... by siv Explorer in Splunk Enterprise 07-18-2025 0 5	0	5
	Splunk Enterprise Server Change of Domain Hi, I would like to request further assistance regarding the following.If I intend to change the domain of my existin... by ws Path Finder in Splunk Enterprise 07-17-2025 0 6	0	6
	Unable to Access Splunk Web via HTTPS I am currently facing an issue accessing the Splunk Web interface over HTTPS.When I configure enableSplunkWebSSL = tr... by ielshahrori New Member in Splunk Enterprise 07-17-2025 0 2	0	2
	Splunk Dashboard for Certificate Expiry Hi All, I am having a requirement to create a dashboard for fetching the expiry date of certificate used in Multiple ... by raushank26 Loves-to-Learn in Splunk Enterprise 07-17-2025 0 3	0	3
	command.search.kv in search.log Hi,Difficult question...Whe have some problems with search performance. Looking at the job inspector i noticed within... by jariw Path Finder in Splunk Enterprise 07-16-2025 0 2	0	2