Splunk Enterprise

Community Activity

	Is it mandatory to create the "splunkfwd" user for Universal Forwarder 9.4.0 or higher version The splunkfwd user is created by default in version 9.1, and seeing the warning "User splunkfwd does not exist - usin... by Nraj87 Explorer in Splunk Enterprise 06-17-2025 0 1	0	1
	Splunk dbconnect error dbconnect_error.PNG How do I change the directory path for the error below. the problem is with the /bin/bin in the p... by Strangertinz Path Finder in Splunk Enterprise 06-17-2025 0 7	0	7
	Splunk Regex Question I have a question regarding how to handle a regex query in a macro. Below I have a regex similar to the one I'm doing... by Bhart1 Loves-to-Learn in Splunk Enterprise 06-16-2025 0 8	0	8
	Installing additional software with splunk-ansible pre tasks I'm working with a Splunk Enterprise cluster deployed with the splunk-enterprise Helm Chart. I'm trying to install Am... by ptbannister New Member in Splunk Enterprise 06-16-2025 0 0	0	0
	Splunk licensing error Hello, I am getting the below error on two of my indexers. The indexers in question are on a different site (Site2) t... by L_Petch Path Finder in Splunk Enterprise 06-12-2025 0 5	0	5
	Splunk CIM-compliance concerns Hello family, here is a concern I am experiencing: I have correlation searches that are activated or enable, and to v... by ND1 Explorer in Splunk Enterprise 06-12-2025 0 6	0	6
	What is the difference between full stack splunk and splunk enterprise? Hi Folks, Please note that I am new to splunk, I have a question what is the difference between full stack splunk and... by Shakeer_Spl Explorer in Splunk Enterprise 06-11-2025 0 6	0	6
	Splunk UF Version Compatibility Hi Team,Planned to upgrade Splunk Enterprise from Version 9.2.1 to 9.4.2 Latest - Currently my Splunk UF version is 8... by RAVISHANKAR Explorer in Splunk Enterprise 06-11-2025 0 3	0	3
	How do we upgrade the app "Python for Scientific Computing" on Linux? We are now using the Python for Scientific Computing app (v2.0.2) on a on-premise Linux instance, and planning to upg... by Naoki New Member in Splunk Enterprise 06-11-2025 0 1	0	1
	Cannot run splunk 9.4.3 after install on Linux Hello after I installed Splunk 9.4.3 on Linux (Ubuntu) I am unable to run it. When I try to start Splunk, it says the... by GeneralBlack Explorer in Splunk Enterprise 06-10-2025 0 6	0	6
	Considerations to upgrade from Enterprise 9.1.1 to 9.4.2 Considerations to upgrade from Enterprise 9.1.1 to 9.4.2, while its also a deployment server. by heres1 Explorer in Splunk Enterprise 06-09-2025 0 4	0	4
	Dashboard for Cert Expiry Hi All,I am new to splunk and looking for assistance in creating a dashboard for multiple windows server certificate ... by raushank26 Loves-to-Learn in Splunk Enterprise 06-08-2025 0 4	0	4
	Error downloading snapshot After running out of disk space on a search head (part of a cluster), now fixed and all SH's rebooted.I get this erro... by dmcnulty Explorer in Splunk Enterprise 06-06-2025 0 2	0	2
	Unable to put the kvstore in maintenance mode KV Store maintenance mode change can only be done on static captain. by Raja1 Engager in Splunk Enterprise 06-06-2025 0 8	0	8
	Thaw from frozen to existing cluster or new cluster or single indexer This project is to test for a potential on-prem to cloud migration.I need to thaw several terabytes of frozen splunk ... by mikefg Communicator in Splunk Enterprise 06-05-2025 0 6	0	6
	spotlight_search results in "The requested URL was not found on this server." Splunk behind reverse proxy Hello all, I have the following case:Splunk accessible on https://dh2.mydomain.com/sendemail931 with "enable_spotligh... by dstoev Path Finder in Splunk Enterprise 06-03-2025 0 1	0	1
	Splunk real-time data integrity check Hi splunkers, My client wants to conduct a consistency check on all indexes that they collectSo I added enableDataInt... by esllorj New Member in Splunk Enterprise 06-02-2025 0 1	0	1
	Using Wildcards in allowedDomainList After upgrade to version 9.4 I have attempted to configure a list of acceptable domains for the alert_actions.conf. M... by drodman29 Path Finder in Splunk Enterprise 05-29-2025 0 4	0	4
	splunk index is flowing, but in application its not reflecting splunk index is flowing, but in application its not reflecting.We are currently investigating an issue where logs sto... by Priya Loves-to-Learn in Splunk Enterprise 05-28-2025 0 1	0	1
	systemctl stop Splunkd hangs Hello,Since a few months we are facing an issue with stopping Splunk on Red Hat Linux-rel8.We do "systemctl stop Splu... by harryvdtol Path Finder in Splunk Enterprise 05-28-2025 0 21	0	21
	Forwarders managment after upgrade Splunk enterprise form 9.3.1 to 9.4.2 i have upgrade Splunk enterprise 9.3.1 to 94.2, already restore /etc, but now forwarder managment dose not show any u... by heres1 Explorer in Splunk Enterprise 05-27-2025 0 3	0	3
	UBA Error Hi Everyone, I encountered an error in UBA, specifically related to the 'caspida-outputconnector'. While the issue ca... by zksvc Contributor in Splunk Enterprise 05-23-2025 0 2	0	2
	Splunk Fields Extraction - Open telemetry Collector Good morning,I’m experiencing an issue with the following log:15:41:41,341 2025-05-13 15:41:41,340 DEBUG [org.jbo.re... by mattt Engager in Splunk Enterprise 05-22-2025 0 3	0	3
	Error in SOAR Connection establishment Hey everyone, I'm trying to configure a new server in the SOAR UI, but I'm running into this error:Error Message:Ther... by Ramachandran Explorer in Splunk Enterprise 05-22-2025 0 2	0	2
	Bucket ID conflicts - when solved on one indexer pops up on the other Hello everyone,We have a distributed deployment of Splunk Enterprise with 3 indexers.Recently, it has been raising De... by ArtieZ Explorer in Splunk Enterprise 05-21-2025 0 8	0	8