Splunk Enterprise

Community Activity

Is it possible to store events coming from the same source in different indexes, depending on their content? Hi,Perhaps this question has been asked before... Is it possible to store events coming from the same source in diff... by michaje Explorer in Splunk Enterprise 12-16-2024 0 5	0	5
how to automatically change index name in all the searches it is using Hi i initially created a index name with XYZ and there are around 60 reports alerts and 15 dashboard created on this ... by deepthi5 Path Finder in Splunk Enterprise 12-15-2024 0 3	0	3
Upgrade to 9.3.2 appears to have broken my installation Hi all, I was upgrading Splunk Enterprise from 9.0.x to 9.2.4 and then 9.3.2. When I try to restart the Splunk Servic... by zarchitect New Member in Splunk Enterprise 12-13-2024 0 5	0	5
Splunk Windows Migration Universal Forwarders Hello,Bit of a novice here.I am in the process of planning to migrate a Splunk universal forwarder from one windows s... by Hashtables New Member in Splunk Enterprise 12-13-2024 0 3	0	3
A question about installing and configuring Splunk Enterprise on Windows server before start ingesting data I just installed Splunk Enterprise on Windows Server 2022. I am able to access web gui. At this point, do i need make... by jkamdar Communicator in Splunk Enterprise 12-12-2024 0 3	0	3
Custom alert trigger count range I want my alert to trigger when the result count is between 250 and 500, trying to use the custom trigger condition i... by jwv Explorer in Splunk Enterprise 12-11-2024 0 5	0	5
Is there a reason why the Upgrade Readiness App does not scan deployment-apps? In the Splunk URA, it says that it includes the /etc/apps and /etc/peer-apps folders in the scans, but it does not in... by BlueSocket Contributor in Splunk Enterprise 12-11-2024 0 4	0	4
Can we still search data with expired license on multisite cluster with smartstore? Hey folks, been a while - I have a question I figured community would be better to answer: We have a multisite cluste... by johnansett Communicator in Splunk Enterprise 12-10-2024 0 3	0	3
How does Splunk handle the frozen storage ? Hello, My index configuration is provided below, but I have a question regarding frozenTimePeriodInSecs = 7776000. I ... by hazem Path Finder in Splunk Enterprise 12-09-2024 0 5	0	5
Scheduled search with only \| inputlookup in the search returns zero results I created a scheduled search that reads 2 input lookup csv files. It returns zero results when I look at the "View Re... by SteveBowser Explorer in Splunk Enterprise 12-09-2024 0 5	0	5
SPL to find KOs ? Hello community, I want to make it efficient when offboarding with clients. Is there an spl to find ALL of the KO's c... by Kenny_splunk Path Finder in Splunk Enterprise 12-09-2024 0 2	0	2
Internal server Error when exposing 8089 port for splunkd rest API with an ingress. I have been trying to set up splunk on my Kubernetes cluster so i can use it with a python script to access the rest ... by shail Loves-to-Learn in Splunk Enterprise 12-09-2024 0 2	0	2
Replace values of host, before indexing, with data from event Hi everyone,I’m currently working on extracting the webaclId field from AWS WAF logs and setting it as the host metad... by nuaraujo Path Finder in Splunk Enterprise 12-09-2024 1 2	1	2
Can not access splunk console at first time installed on EC2 I downloaded splunk Enterprise on EC2 at /opt folder using tgz file. unzipped it using tar. then started it on port n... by shivprasad New Member in Splunk Enterprise 12-09-2024 0 3	0	3
Splunk DB connect issue Hello Splunkers!!I am facing one issue while data getting ingested from DB connect plugin to Splunk. I have mentioned... by LogUx Motivator in Splunk Enterprise 12-09-2024 0 10	0	10
Splunk license exceeded we run in an issue with the Indexer ... if there are 5 Times an drop of the max day volume .. the indexer will be dis... by ukothan_78 New Member in Splunk Enterprise 12-06-2024 0 2	0	2
REST API - "GET" SavedSearches gets confused? 🙄 Hello.I'm getting trouble listing all my SavedSearches from a SHC, using a command line REST API get.I'm asking Splun... by verbal_666 Builder in Splunk Enterprise 12-06-2024 0 8	0	8
Running Splunk Enterprise Haven installed splunk to this point what do i have to do next to get it running by Jacobak Loves-to-Learn in Splunk Enterprise 12-06-2024 0 2	0	2
Transforms.conf adding host to log message Hi Splunk Community, Is there a way to capture the host of a UF as its passing through a HF to add the host right bef... by winter4 Loves-to-Learn in Splunk Enterprise 12-06-2024 0 6	0	6
Moving windows logs to Nas The goal here is that windows logs that are moved off a system can be added to a NAS location that i can mount to the... by lclayton95 Loves-to-Learn Everything in Splunk Enterprise 12-05-2024 0 1	0	1
Why are we receiving this ingestion latency error after updating to 8.2.1? So we just updated to 8.2.1 and we are now getting an Ingestion Latency error… How do we correct it? Here is what the... by Marc_Williams Explorer in Splunk Enterprise 12-05-2024 2 69	2	69
Forwarding events to 2 indexer clusters but transform one copy I have a heavy forwarder that sends the same event to two different indexer cluster. Now this event has a new field "... by klim Path Finder in Splunk Enterprise 12-05-2024 0 2	0	2
does the splunk agent provide any log integrity Hi allI have 2 scenarios:We ingest logs (windows, linux) using the Splunk agent.Ingest logs from flat files using the... by jama8470 Engager in Splunk Enterprise 12-03-2024 0 2	0	2
Error when using DSDL app - [mlspl.MLTKContainer] [get_endpoint_url] Failed to connect to the container I am using Splunk enterprise's DSDL app and can't run any of the examples as I typically end up with this error.[mlsp... by sudrus New Member in Splunk Enterprise 12-01-2024 0 1	0	1
AWS SES alart mail cant sendding I have set up email authentication and SMTP using Amazon SES.The test email was successful. I configured the mail ser... by sky12345sky1 Explorer in Splunk Enterprise 11-30-2024 0 1	0	1