Splunk Enterprise

Community Activity

Is there an example/advice on some SPL for tracking down users running AD-HOC searches that search on all indexes? Hello, Could anyone offer an example/advice on some SPL for tracking down users running AD-HOC searches that search o... by cass_major Engager in Splunk Enterprise 06-20-2023 0 3	0	3
Going to Splunk 9 : Does CPU and RAM usage increase after migration? I splunkers, I'm currently planning to upgrade to Splunk 9. Does someone of you had noticed CPU and RAM usage incre... by o_calmels Communicator in Splunk Enterprise 06-20-2023 0 0	0	0
Lookup Editor 4.0.1 - New UI changes difficult to use? Hi good people, Is it just me or has the new Lookup Editor 4.0.1 UI become super annoying to use.First the centering ... by auradk Path Finder in Splunk Enterprise 06-20-2023 0 2	0	2
Do I need to clear out some config file to get the lookup table working again? I have a lookup table file that changes periodically. Replacing the lookup table this time around resulted in multipl... by splunkke New Member in Splunk Enterprise 06-19-2023 0 0	0	0
Splunk Stopped sending email for Alerts and reports? Splunk stopped sending email for Alerts, reports and Dashboards. Checked from IT team regarding SMTP settings under s... by CHAUHAN812 Explorer in Splunk Enterprise 06-17-2023 0 4	0	4
Are Alerts and Reports Global or specific to that Search Head? For example if there are two Search Heads and I go to Settings \ Searches, reports, and alerts on Search Head 1and I ... by Gregski11 Contributor in Splunk Enterprise 06-16-2023 0 1	0	1
How to print timeline/notes in Splunk ES's investigations? When you print the summary of an investigation through ES it does not include notes. Is there a way to add those? Alt... by PwC-Kimmy Explorer in Splunk Enterprise 06-16-2023 0 0	0	0
Unsecure Splunk Browser Hi Splunkers,I am new to handling certificates but it seems to be the resolution that I need to resolve the unsecure ... by arielpconsolaci Path Finder in Splunk Enterprise 06-16-2023 0 1	0	1
Can someone help with error received while configuring Splunk DBconnect? Can someone help me please with the configuration of Splunk DB connection I receive failed to restart task server . by jetmirhoxha29 New Member in Splunk Enterprise 06-15-2023 0 0	0	0
Splunk forwarder in regulated environment Dear Splunk Experts, We plan using your product in a regulated environment, having a question on the (heavy) forwarde... by FGo Engager in Splunk Enterprise 06-14-2023 0 2	0	2
How to add close button to Splunk banner? How to add close button(close symbol) to the banner message which is poping up when we set banner message in splunk, ... by subitha_kennedy Loves-to-Learn Everything in Splunk Enterprise 06-14-2023 0 1	0	1
How to resolve "splunk.service could not be found"? Trying to install splunk on ubuntu instance within e3, I've partitioned and formatted the drive and every step works ... by henryf Explorer in Splunk Enterprise 06-14-2023 0 3	0	3
How to fix: Unable to Load Content Management? When I navigate to Configure > Content > Content Management, I'm greeted with an error message stating "Could not loa... by awise New Member in Splunk Enterprise 06-14-2023 0 0	0	0
How to achieve Splunk smtp authentication via API Key? Hi, Splunk now authenticates to the mail server with user/pass. Is it possible to configure splunk smtp authenticat... by cmorenobuitrago Explorer in Splunk Enterprise 06-14-2023 0 3	0	3
Why doesn't SAML response contain group information using Google Workspace? Hi, I'm facing an issue while configuring SAML on Splunk Cloud, using Google Workspace "Saml response does not contai... by vincentteo91 Loves-to-Learn Lots in Splunk Enterprise 06-14-2023 0 0	0	0
Why have transforms.conf stopped working? Hi, I have this props and transforms file to filter out the events before they reach the indexqueue. Not sure but t... by _pravin Contributor in Splunk Enterprise 06-13-2023 0 0	0	0
How to merge cells in custom table format? Hello, I have a question for a custom table. I have to do this, but in Splunk it's not possible to merge cells. I... by anissabnk Path Finder in Splunk Enterprise 06-13-2023 0 6	0	6
Can you send the same event log to two different Indexes in the same app? so we have a Deployment Server with an application on there that already sends the three basic Windows Event logs (Ap... by Gregski11 Contributor in Splunk Enterprise 06-12-2023 0 1	0	1
How many escapes "\" do I need in .conf file regex? For example, in props.conf TIME_PREFIX requires a regex. My regex seems to work in my search but does not seem to be... by marycordova SplunkTrust in Splunk Enterprise 06-12-2023 1 3	1	3
How to merge segmented syslog events into one? We are currently facing the issue that we are indexing syslog data from beyond trust. The product splits it's syslog ... by MD5 New Member in Splunk Enterprise 06-12-2023 0 0	0	0
Sanity check on Indexer cluster with differing peer-apps/indexes.conf & system/local/indexes.conf? Sanity check please re: Splunk indexer remote storage configuration (1) Our indexers are set up in a clustered enviro... by bamflpn New Member in Splunk Enterprise 06-12-2023 0 2	0	2
Why is search area not giving me output when used? I have a splunk acct that i login to via vpn. The issue is that when i use the "search" area i cannot get an output b... by ludjunior New Member in Splunk Enterprise 06-12-2023 0 7	0	7
Has anyone encountered js script not launcing after a page refresh? I am using a js script in a dashboard. But after each refresh of the web page or after a restart of the splunk server... by Razziat Explorer in Splunk Enterprise 06-12-2023 0 1	0	1
Why is Oracle connection not working-ORA-28000 Account is locked? Hi All, We use Splunk DB Connect 3.10.0 for Oracle connections. Weirdly one Connection stopped working (after a passw... by neeravmathur Path Finder in Splunk Enterprise 06-11-2023 0 2	0	2
How to dynamically lookup filename? Hello Splunk Experts,I've tried below query to use the 'previous_day' field in inputlookup and save it in outputlooku... by Thulasinathan_M Contributor in Splunk Enterprise 06-09-2023 0 4	0	4