Splunk Enterprise

Community Activity

Windows Event Index redirects Trying to route windows application logs to correct index based on event data. The scenario I have XmlWinEventLogs co... by sean_aditum Engager in Splunk Enterprise 10-22-2020 0 1	0	1
Question on a Splunk Searchhead app and distsearch.conf Hi! I am looking to try to standardize my configuration across my Search Head Cluster. I have 15 Search Heads, and wh... by skirven Communicator in Splunk Enterprise 10-22-2020 0 1	0	1
Event annotation for the min and max value of a field Hey everyone. I have never tried creating event annotation before so i am not able to grasp it properly. I want to sh... by nikitha15 Explorer in Splunk Enterprise 10-22-2020 0 1	0	1
.conf20 Splunk Platform Announcements What were the new Splunk platform announcements made at .conf20? by judithsr Splunk Employee in Splunk Enterprise 10-22-2020 0 1	0	1
Python upgrade Hi at all, probably it's an already asked question but I cannot find the correct one: I upgraded Splunk to 8.0.2 on m... by gcusello SplunkTrust in Splunk Enterprise 10-22-2020 0 2	0	2
Regarding extracting show source code from an event I want to know how can I extract show source code from event action type. I tried using _raw and and rex command. I e... by animeshkmr54 Observer in Splunk Enterprise 10-22-2020 0 2	0	2
Insight into Citrix VDI Has anyone been able to track "unintended" disconnections from Citrix VDI with Splunk? We have a DB Connection to the... by Rob_O Engager in Splunk Enterprise 10-21-2020 1 1	1	1
Does Splunk support SSL Certificate SAN (Subject Alternative Name) We have scenario where we run a indexer cluster with 10+ indexers and the Universal Forwarders send data to all these... by VasukiPramod Explorer in Splunk Enterprise 10-21-2020 0 0	0	0
In searchhead cluster with six machines, only one SH machine is not giving results for a particular app. In searchhead cluster with six machines, only one SH machine is not giving results for a particular app.We have check... by Reethika Path Finder in Splunk Enterprise 10-21-2020 1 8	1	8
Settings for upgrade ufw app hi all,Has anyone able to get the upgrade ufw app for windows to work? I get a message in the logs saying it started... by boss6 Explorer in Splunk Enterprise 10-21-2020 0 1	0	1
Upgrade 300 Forwarders to latest version Hello plp. At the moment i need to upgrade a bunch of Ufs (linux and windows), from versions 6 & 7 to 8.0. I have se... by tinrush1991 Loves-to-Learn Lots in Splunk Enterprise 10-21-2020 0 0	0	0
How to correlate two diferent searches into one event Hi guys, I need to configure an alert when people access as root in a server and for that I have two types of events:... by franciscof Explorer in Splunk Enterprise 10-21-2020 0 0	0	0
Adding attributes to existing event Hi all,Does anyone know of any way to update an event in Splunk?so far what my searches brought me was reindexing the... by johnsynack Loves-to-Learn in Splunk Enterprise 10-21-2020 0 1	0	1
Splunk 8.1.0 tags are unreliable Hi,I just upgraded our Splunk server to 8.1.0 and after a while realized some of our good old searches utilized in a... by kaurinko Communicator in Splunk Enterprise 10-21-2020 0 0	0	0
AppInspect Time for Approval I would like to pubblish an app on the Splunkbase and I would like to know how long it takes to get the approval afte... by Michele_G Engager in Splunk Enterprise 10-20-2020 1 2	1	2
how to change the fields in the dashboard for splunk Hi, In this dashboard ,i want the changing fields and coloumn.For example I want the " planned_AB_ECD1" Beside to "T... by ddp2kor Loves-to-Learn in Splunk Enterprise 10-20-2020 0 4	0	4
Which Splunk version is supported on AZURE platform/premises? We are planning to deploy our splunk enterprise into Azure Premises.Which Splunk version is supported in Azure platfo... by Ashwini008 Builder in Splunk Enterprise 10-20-2020 1 3	1	3
Changing default conversion provided by Splunk for the UI language does not work in case of navigation menus Hi,I'm trying to internationalize the Splunk Web user interface by adding support for languages such as Japanese, Ger... by t_shreya Path Finder in Splunk Enterprise 10-19-2020 1 2	1	2
AWS WAF logs SQL Injection Splunk Query Hello,Integrated the AWS WAF logs to Splunk, now we need to monitor the Splunk SQL Injection and Cross-Site Script at... by phanichintha Path Finder in Splunk Enterprise 10-19-2020 0 1	0	1
Logs not getting ingested from S3 bucket Hi, We are trying to ingest logs from S3 bucket to splunk, we are not seeing any error at splunk end, but logs are no... by VijaySrrie Builder in Splunk Enterprise 10-19-2020 0 2	0	2
Duplicate Values in REST API Hi,I am using below REST API Call and able to see the results - But it is giving me duplicate values. In splunk I am... by VijaySrrie Builder in Splunk Enterprise 10-19-2020 1 7	1	7
spath command Hi,What is spath command, when to use it? Please expalin below command.\| spath input=json Is there any alternative co... by VijaySrrie Builder in Splunk Enterprise 10-19-2020 1 6	1	6
easy way to determine cause for increase in traffic suppose my logs have fields A=a1..aN, B=b1..bN, C=c1..cNand I see an increase in number of requests, i.eindex=* \| buc... by dtakacssplunk Explorer in Splunk Enterprise 10-19-2020 1 1	1	1
Splunk Enterprise Licensing Update: Conditional Licensing for <100GB We have updated our licensing policy! For on-premises license stacks of less than 100GB on Splunk Enterprise 8.1.0 an... by judithsr Splunk Employee in Splunk Enterprise 10-19-2020 0 0	0	0
Splunk Power User certification Validity Hi Team,Is there any validity for Splunk Power User certification.I completed the cert on 17th of March 2017.Can I di... by vijaysri1992 Engager in Splunk Enterprise 10-19-2020 1 2	1	2