Splunk Enterprise

Community Activity

How to best manage AD groups, users, roles and index access? Hello.I have two indexes and three users. Each user is in specific AD group. Each group is mapped to a respective r... by Jamie Path Finder in Splunk Enterprise 11-24-2023 0 2	0	2
How do I configure Splunk Heavy Forwarder (HF) to receive logs from SolarWinds SEM I'm trying to set up a Proof of Concept (POC) environment for Splunk Heavy Forwarder (HF), which is receiving data fr... by sarvananth Explorer in Splunk Enterprise 11-23-2023 0 1	0	1
ITSI - configuration of KPI Hi Everyone,I would like to ask you about configuration ITSI. I want to configure ITSI, as I show you below example.I... by jack3 New Member in Splunk Enterprise 11-23-2023 0 0	0	0
Unknown version is shown on first login and even after logout and login again for splunk How to get rid of Splunk UNKNOWN_VERSION on splunk UI. This is happening on all the browsers (Chrome, Edge, Firefox)... by himaniarora20 Explorer in Splunk Enterprise 11-22-2023 0 2	0	2
How to forward the data from AWS S3 to Splunk Enterprise? I have installed a free version of Splunk Enterprise 9.1 in my local system. I would need few logs files from my S3 b... by akarivaratharaj Communicator in Splunk Enterprise 11-22-2023 0 3	0	3
Splunk SH Cluster Reversion We are facing very strange issue as the objects of specific Apps reverted back to old settings even the lookup files ... by HassanElDesouky Observer in Splunk Enterprise 11-20-2023 0 4	0	4
Cannot import an aruba 7210 into splunk Greetings, I have Splunk 9.1.1 trying to import an aruba 7210 into splunk using the aruba app with udp 514. Sourcetyp... by Daven New Member in Splunk Enterprise 11-17-2023 0 0	0	0
How to pull data from sharepoint to Splunk? Hi, How can I pull data from sharepoint to splunk? What are various options available to pull data? any suggestions? ... by Ashwini008 Builder in Splunk Enterprise 11-17-2023 0 5	0	5
Best Practice for Automatic Lookups Is there a suggested size of lookup that would be the maximum size of a lookup that should be used for an automatic l... by jaburke1 Path Finder in Splunk Enterprise 11-17-2023 0 3	0	3
Setting up secure access between Enterprise Splunk to external 3rd party AWS S3 Hi all,I am new to SPLUNK and would appreciate some community wisdom. We are trying to get data from an external AWS ... by ran Observer in Splunk Enterprise 11-16-2023 0 3	0	3
Alert manager enterprise - Creation of events in index Hello everyone,I am encountering an issue with the Alert Manager Enterprise application; following the triggering of ... by MCH2018 Explorer in Splunk Enterprise 11-15-2023 0 3	0	3
How is Splunk creating the signature_id field for Windows Event Logs? I'm trying to troubleshoot some Windows Event Log events coming into Splunk.The events are stream processed, and come... by ejwade Contributor in Splunk Enterprise 11-15-2023 0 7	0	7
loss of time input Hi!Faced with a very specific problem.We use splunk enterprise 7.3.0. We have ru_RU written in the address bar instea... by Vadim_Peskov Observer in Splunk Enterprise 11-14-2023 0 1	0	1
Splunk DB Connect timeout - Unable to read next record Hello,We had this error on an output query set-up on Splunk DB Connect.Basically the Splunk query is inserting data i... by edoardo_vicendo Builder in Splunk Enterprise 11-14-2023 1 1	1	1
Timechart by daily number for 10 or more events index=gbts-vconnection sourcetype=VMWareVDM_debug "onEvent: DISCONNECTED" (host=Host1 OR host=host2)\| rex field=_raw ... by Madmax Path Finder in Splunk Enterprise 11-14-2023 0 4	0	4
Changes to the splunkd_ui_access.log I had this search set up: index=_internal source=splunkd_ui_access.log /app NOT(user="-" OR uri_path="/app/*/search... by fatsug Builder in Splunk Enterprise 11-14-2023 0 1	0	1
Splunk Enterprise Update 9.0.5 to 9.1.1 wiped I/O configuration, why? After upgrading a distributed Splunk Enterprise environment from 9.0.5 to 9.1.1 a lot of issues observed. The most pr... by fatsug Builder in Splunk Enterprise 11-14-2023 0 1	0	1
Recommendations for migrating from CentOS 7 Hi, we currently have our on prem Splunk infrastructure running on CentOS 7 servers. CentOS 7 is going EOL in 2024. ... by cpuffe New Member in Splunk Enterprise 11-14-2023 0 2	0	2
Splunk_SA_CIM not accesible and linking to another TA Hello communityWe installed the CIM app in our SH cluster. The installation seemed to work as expected, all defaults ... by fatsug Builder in Splunk Enterprise 11-14-2023 0 9	0	9
How could I show the value in my data in the drop down? I want to show the drop down value automatically about data name "landing_time".So I wrote my code like this.\| eval s... by Questioner Path Finder in Splunk Enterprise 11-12-2023 0 4	0	4
universalforwarders in centos7 Dear All,Unable to send data from universal forwarder, to Splunk Enterprise i have minimal knowledge in Splunk I'm t... by Shakeer_Spl Explorer in Splunk Enterprise 11-11-2023 0 2	0	2
Query Hii am trying to build a dashboard and I require a query to execute below some searches below: 1. REPORT FALSE POSITI... by NOORULAINE Loves-to-Learn Lots in Splunk Enterprise 11-10-2023 0 1	0	1
SplunkUI \| app list error \| V9.1.0.1 \| (SVA S1 lab instance) I've just upgraded to Splunk v9.1.0.1 in a stand-alone (S1 SVA) lab instance from 9.0.x. All fine and operating at a ... by NullZero Communicator in Splunk Enterprise 11-10-2023 0 3	0	3
Data Models causing "out of memory" on new hardware We are having issus with Data models from Splunk_SA_CIM running for a very long time (hitting the limit) and causing ... by erw550 Path Finder in Splunk Enterprise 11-09-2023 0 0	0	0
Streamed search execute failed because: Error in 'lookup' command: Failed to re-open lookup file Hello,I received the following error, the issue resolved itself after 4 hours. The CSV file size is 54 MB. Streamed ... by LearningGuy Motivator in Splunk Enterprise 11-09-2023 1 0	1	0