Splunk Enterprise

Community Activity

Splunk URL is not correct for my Splunk Alerts Splunk URL contains only the hostname in all my Splunk alerts and it's not reproducing the correct URL instead it's j... by RAVISHANKAR Explorer in Splunk Enterprise 05-01-2026 0 3	0	3
SPLUNK UF on WIN7 32 bit System Hi, I'm attempting to install the latest SPLUNK UF on a WIN7 32bit system, which cant be upgraded. Every time I try t... by andrew_lander New Member in Splunk Enterprise 04-30-2026 0 4	0	4
Are there any restrictions on the free Cribl license? Not sure if I can post this question here, but Cribl is a complementary product. Our current license is at 5 TB quota... by LovingSplunk Path Finder in Splunk Enterprise 04-30-2026 0 4	0	4
Best practice for archiving frozen data I am in the process of pulling together a design for a new Splunk deployment.The deployment will be on the small side... by mike_k Communicator in Splunk Enterprise 04-27-2026 0 5	0	5
Offline Documentation? New to splunk... I am installing it on an ISOLATED and OFFLINE Network, as such I cannot go to help.splunk.com to loo... by Ish42 Engager in Splunk Enterprise 04-27-2026 1 3	1	3
Passing search results to a python script in alert_actions Hi all,I'm trying to execute a script in a scheduled Alerts, when results of a search are greater than 0.I've created... by fabrizioalleva Path Finder in Splunk Enterprise 04-27-2026 0 2	0	2
internal index always exceed the Max Size defined Hello there,I have an issue with the internal index of my indexers (_audit, _introspection, _metrics) because, for an... by spoonmaniac Explorer in Splunk Enterprise 04-27-2026 0 8	0	8
Correct syntax for new WinEventLog Entry I have been given the task to insert or attempt to insert Event Logs from Applications and Service Logs.Im assuming ... by sgabriel62 Engager in Splunk Enterprise 04-25-2026 0 2	0	2
Architecture: criteria for number of Indexers estimation Hi Splunkers, I'm curious about a sizing issue: deciding the number of Indexers.I've addressed this topic many times,... by SplunkExplorer Contributor in Splunk Enterprise 04-24-2026 1 9	1	9
Logs forwarded from SC4S is not showing on Splunk Hi,We are facing an issue related SC4S. We have sophos firewall logs coming on sc4s port 514. we have configured splu... by ankit13 Loves-to-Learn Lots in Splunk Enterprise 04-23-2026 0 4	0	4
How to resolve disk usage show negative value on monitoring console after adding storage. Hi, i made changes on my indexer storage but when i see on monitoring console part disk usage, the value is negative.... by elend Communicator in Splunk Enterprise 04-17-2026 0 11	0	11
Issues with Splunk Universal Forwarder Sending Security Logs After Upgrade to 10.0 Hi Splunk Community,I recently upgraded my Splunk Universal Forwarders from version 9.4.3 to 10.0, and since the upgr... by telvinwells08 Loves-to-Learn in Splunk Enterprise 04-16-2026 0 4	0	4
RBAC segmantation inside an index? Good morning, Splunkers, I have a question about RBAC segmentation in Splunk.Specifically, my question is: can role-b... by SplunkExplorer Contributor in Splunk Enterprise 04-15-2026 0 4	0	4
Events ignored from episode after Bidirectional Ticketing Event I have a NEAP that is configured to create a ServiceNow ticket after 4 events have been added to the episode. Every t... by jtv1703 Observer in Splunk Enterprise 04-15-2026 0 2	0	2
Add Enterprise Security to on prem clustered environment Hi Splunkers, I have a doubt about setting for Splunk Enterprise Security.As usual when I put a question here, let me... by SplunkExplorer Contributor in Splunk Enterprise 04-13-2026 0 8	0	8
AuthStorageManagerConf [65709 SavedSearchHistoryThread] - Config entry not found. AuthStorageManagerConf [65709 SavedSearchHistoryThread] - Config entry not found. key=oauth2_external_app_client_*,... by sgabriel1962 Explorer in Splunk Enterprise 04-09-2026 1 2	1	2
Splunk Add-on for Microsoft Office 365 - Message Trace Hi,Does anyone know if it is planned to upgrade the Splunk Add-on for Microsoft Office 365 (Splunk Add-on for Microso... by _Matthew_ Observer in Splunk Enterprise 04-09-2026 0 2	0	2
Correcting ingesting timestamp for Solarwinds alert Hello,I recently enabled a SolarWinds alert in the inputs.conf on the heavy forwarder. The data is now ingesting into... by tstewart Explorer in Splunk Enterprise 04-07-2026 0 4	0	4
How to integrate Salesforce Marketing Cloud with Splunk As a Splunk SME, I'm tasked to set up the ingestion of Salesforce Marketing Cloud transactional messages into Splunk.... by lawrence_magpoc Path Finder in Splunk Enterprise 04-07-2026 0 7	0	7
SPL2 can access only a subset of available indexes, while SPL1 can access all of them Hi everyone,I’m testing SPL2 for the first time after upgrading our Splunk deployment from 10.0 to 10.2.1, and I’m se... by vnetrebko Explorer in Splunk Enterprise 04-07-2026 0 4	0	4
Splunk Stable version upgrade 10 Is there a recommended stable release of Splunk? We’re currently running Splunk On-Prem 9.2 and planning an upgrade t... by viku7474 Explorer in Splunk Enterprise 04-06-2026 0 2	0	2
Cisco ESA Add on UI Configuration and Inputs page does not loading I need to configure cisco esa in splunk but Configuration and inputs page does not loads and also I don't have any id... by AceX Path Finder in Splunk Enterprise 04-06-2026 0 1	0	1
limiting size of change lookups Love the app. Invaluable! We are using the 'tracking' lookups, and it works great, but we're noticing they've grown... by wryanthomas Contributor in Splunk Enterprise 04-05-2026 1 2	1	2
how to show in dashboard the -7d@h and now() in a dashboard title Hi, problem is very simple.A dashboard without time picker and hard defined <earliest>-7d@h</earliest><latest>now</l... by spisiakmi Builder in Splunk Enterprise 04-02-2026 0 7	0	7
How to get the API url for splunk dashboards I am attempting to retrieve search results from a Splunk dashboard via REST API but I am unable to identify the corre... by mdarveka New Member in Splunk Enterprise 04-01-2026 0 4	0	4