Splunk Enterprise

Community Activity

Could not load lookup=LOOKUP-useragentstrings In Splunk ES and the platform, this error keeps appearing and I couldn't resolve it.Could not load lookup=LOOKUP-user... by kareem Explorer in Splunk Enterprise 08-05-2024 0 3	0	3
Power BI logs to Splunk Hello Everyone,I want to integrate Power BI with Splunk and view Power BI logs in Splunk for analysis. Can someone ex... by rahulkumar Path Finder in Splunk Enterprise 08-02-2024 0 0	0	0
Group events using fields Hello,How can I use transaction to Group events using fields and Group events using fields and time? I am new to splu... by iremdoesthings Loves-to-Learn in Splunk Enterprise 08-02-2024 0 6	0	6
Cooked connection to ip=x.x.x.x Hi all,We recently ran into issues with our heavy forwarder being unable to connect to certain IPs in our Splunk Clou... by splunkzilla Explorer in Splunk Enterprise 08-01-2024 1 0	1	0
INGEST_EVAL I am working on ingesting the WSJT-X log. I got to where I have the basic fields in Splunk and wanted to create a dat... by splunkpersona Loves-to-Learn in Splunk Enterprise 07-31-2024 0 8	0	8
Core Certified User Exam Tips Hello, I am going to be sitting for the Core Certified User Exam in a week, and I just wanted to ask if there were an... by OKumolalo Engager in Splunk Enterprise 07-31-2024 0 1	0	1
Capability Template for CISO/ISSO/Analyst Does anyone have a template of capabilities you think are necessary for a role specific to CISOs, ISSM/ISSO, and Anal... by dathrimar Explorer in Splunk Enterprise 07-31-2024 0 2	0	2
What Splunk UF version ships with SOAR 6.2.2? We got flagged for an OpenSSL1.0.2f vulnerability on our SOAR instance within the default installed Splunk Universal ... by mpc7zh Explorer in Splunk Enterprise 07-31-2024 0 1	0	1
Users can't edit correlation searches in Splunk ES / role inheritances and capabilities Hello,Could you tell me what is priority? capabilities explicitly enabled/disabled or from inherited roles?I had to m... by splunkreal Influencer in Splunk Enterprise 07-30-2024 0 0	0	0
Optimally archive notable events Hello Splunk Community,For compliance reasons, I need to figure out an efficient way to archive notable events that i... by Zorghost Loves-to-Learn in Splunk Enterprise 07-28-2024 0 1	0	1
How to assign minimum permissions for user to edit their dashboards and alerts in Splunk I need help with assigning permissions in Splunk.1. There is an user who needs to edit their dashboards and alerts in... by jahnavi Loves-to-Learn in Splunk Enterprise 07-25-2024 0 0	0	0
Splunk Web wont start After disabling the Splunk readiness app due to a vulnerability recommendation, i restarted my search head which had ... by Kwabena13 Engager in Splunk Enterprise 07-25-2024 0 0	0	0
Unable to accept Terms of Service and continue to splunk web. We recently added a TOS to our deployment. We have smart card auth enabled as well. When both are enabled at the same... by williamcclark Explorer in Splunk Enterprise 07-25-2024 0 0	0	0
If I increase the RF on a SmartStore enabled indexer cluster what happens on SmartStore? If I increase the RF on a SmartStore enabled indexer cluster what happens on SmartStore? Is a 2nd copy actually creat... by cybersecnutant Explorer in Splunk Enterprise 07-24-2024 0 5	0	5
Eventtype 'msad-rep-errors' does not exist or is disabled I have a dashboard which gives the below error at user end but when i open the dashboard i dont see any error at my e... by rukshar Explorer in Splunk Enterprise 07-24-2024 0 3	0	3
Slow Search Performance Hi,we moved a customer from virtualized splunk indexers to physical machines with nvme storages. Since me performed t... by DanielAmlung Path Finder in Splunk Enterprise 07-24-2024 0 0	0	0
Help to make my apps CIM compliant HiI have developped a dashbord relative to firewall metrics.I need to make my dashboard CIM compliant Do i need my se... by jip31 Motivator in Splunk Enterprise 07-24-2024 0 4	0	4
dovecot Logs Hello team,Am working with dovecot logs-- it's a mail logs.I managed to integrate it with Splunk through syslog.it gi... by siemsplunk Explorer in Splunk Enterprise 07-24-2024 0 1	0	1
Will a UF version 9.0.6 be compatible with splunk enterprise version 9.0.5? I'm currently running Universal Forwarders with version 9.0.0 and 9.0.1. These UFs were flagged for vulnerabilities ... by FPERVIL Explorer in Splunk Enterprise 07-23-2024 0 1	0	1
License Warning In last couple of days, I have seen few license alerts:This pool has exceeded its configuration poolsize=5GB bytes. A... by jkamdar Communicator in Splunk Enterprise 07-23-2024 0 1	0	1
Splunk License I have a Splunk 8.2.9 and I wanted to upgrade to version 9. Can i use the same license after upgrade? by ddbase2 New Member in Splunk Enterprise 07-23-2024 0 1	0	1
Why is KV Store status failing? Hello everyone I have a situation with the KV Store, from the SH cluster nodes I am getting the next message KV Store... by gl_splunkuser Path Finder in Splunk Enterprise 07-23-2024 0 8	0	8
I'd like to know what are the usecases applied on splunk enterprise I'd like to know what are the usecases applied on splunk enterprise by arunkumarnst New Member in Splunk Enterprise 07-23-2024 0 1	0	1
How do I resolve Send Email error - SMTP server? Hi all, I'm to trying to set an email alert notification using Splunk enterprise 9.0 but I am getting the following e... by AishwaryaAlhat Engager in Splunk Enterprise 07-23-2024 0 5	0	5
How can I retrieve fired alerts in chronological order ? Hello,I used Splunk REST API with Search endpoint to be able to retrieve the latest fired alerts based on a title sea... by av81 Engager in Splunk Enterprise 07-22-2024 0 1	0	1