Splunk Enterprise

Community Activity

	Should I create a large number of indexes? Dear Splunk experts,Just want to ask about the general upside/downside of creating a large number of indexes. Thinkin... by Gong1027 Explorer in Splunk Enterprise 09-05-2023 0 4	0	4
	Complete Backup of Splunk Enterprise installation - On the fly? We have a splunk enterprise installation where everything is on the same server/install (searchhead etc.).At the mome... by PatrikL Observer in Splunk Enterprise 09-05-2023 0 1	0	1
	Splunk UF - The file is invalid, cannot open Hello to everyone!I have an UF installed on a MS file serverOur Unified Communications Manager sends CDR and CMR file... by NoSpaces Contributor in Splunk Enterprise 09-04-2023 0 0	0	0
	How to Forward indexers data to an external system? Hi, I have a Splunk Enterprise installation composed of 3 clustered indexers. I need to forward all the events receiv... by gabribot Explorer in Splunk Enterprise 09-01-2023 0 11	0	11
	Trellis drilldown issues when using token Hi,I have a trellis which I need to enable drilldown on which should launch a custom search using a token determined ... by shazbot79 Path Finder in Splunk Enterprise 09-01-2023 0 5	0	5
	Duplicate event Splunk shows duplicate events in search results when there are no duplicates in the source file. by JANR Loves-to-Learn Lots in Splunk Enterprise 09-01-2023 0 2	0	2
	List of alerts Hi all, Can we list out alerts based on the host ips used in alert queries. by Ash1 Communicator in Splunk Enterprise 08-31-2023 0 1	0	1
	Why can I not load distirbuted lease configs due to err '[distributed_leases] stanza does not exist'? Start Up issue Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) a... by maurizio_zito Observer in Splunk Enterprise 08-31-2023 0 1	0	1
	How to deal with unattended universal forwarder upgrade ? Hi, I'm in the middle of testing deployment of the UF for a new setup and I started with 9.0.1, deploying it with ans... by Arjan1 New Member in Splunk Enterprise 08-31-2023 0 0	0	0
	Universal Forwarder not sending Sysmon logs to docker image of splunk enterprise Hi,I'm using a splunk enterprise based in a docker image, the dashboard is getting all the default windows events bu... by al101 New Member in Splunk Enterprise 08-31-2023 0 0	0	0
	ERROR">Cannot perform action "POST" without a target name to act on I need to run a curl command to run various tasks such as creating searches, accessing searches etc.I have the below ... by damode1 Path Finder in Splunk Enterprise 08-30-2023 0 0	0	0
	Splunk REST API Post route is throwing Cannot perform action "POST" without a target name to act on .net core I am trying to create a role using splunk REST API (https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTREF/RESTac... by mylarehman New Member in Splunk Enterprise 08-30-2023 0 2	0	2
	Metric index storage optimization we have a data of 14k events under event index, which is unstructured. I'm trying to ingest this data under a metric ... by anand_p Engager in Splunk Enterprise 08-30-2023 0 0	0	0
	Why does KV store fail to initialize? The problem: My search head is populating with an audit lookup error after upgrading from 9.0.0 to 9.0.2. What I've ... by dwthomas16 Explorer in Splunk Enterprise 08-30-2023 0 1	0	1
	Does smartstore consume ingestion volume license I want to offload some logs into MinIO using smartstore to reduce volume consumption in license, but I cannot find re... by kristen Explorer in Splunk Enterprise 08-30-2023 0 1	0	1
	How to adjust timestamp for some events sending by UF Hello for everyone!I have an UF installed on an MS Exchange server that sends data to the indexer layerSearch actions... by NoSpaces Contributor in Splunk Enterprise 08-29-2023 0 1	0	1
	中間転送についてAbout intermediate transfer HeavyforwarderをIntermediateForwarderとして使用し、UF→HF→SplunkCloudのような構成をするとき、UFから来たデータを転送するためにはHFでどのような設定を行う必要があるのでしょうか。ウ... by どらく Explorer in Splunk Enterprise 08-29-2023 0 2	0	2
	中間転送について (About intermediate transfer) I would like to know how to transfer data received from UniversalForwarder from HeavyForwarder to SplunkCloud. I woul... by どらく Explorer in Splunk Enterprise 08-28-2023 0 4	0	4
	Splunk Add-on for AWS : How to Fetch Cloudwatch Metrics with NO Dimensions? Hi Splunker's I am using "Splunk Add-on for AWS" and trying to fetch metrics from CloudWatch.Currently stuck on an im... by MrWhoztheBoss Explorer in Splunk Enterprise 08-25-2023 0 1	0	1
	Splunk - ServiceNow Integration Hi All,We are currently in learning phase of Splunk and wants to integrate Splunk with ServiceNow using Splunk Integr... by Mritunjay Observer in Splunk Enterprise 08-25-2023 0 0	0	0
	Splunk monitor data input different behavior after sourcetype change Hi Splunkers, today I noted a behavior I don't understand and I'm here to ask you help me.On a customer environment, ... by SplunkExplorer Contributor in Splunk Enterprise 08-25-2023 0 0	0	0
	can we execute a script or savedsearch as soon as source has some event to the indexer I have a requirement to process and correlate the data as soon as things come in.The data has some triggering events,... by khreddy Explorer in Splunk Enterprise 08-24-2023 0 3	0	3
	How to create a search to set an Alert only when two conditions met? I have the following query that gives the count for port and CPU percent. index=abc source=xyz SMFID=EDCD SMF119HDSu... by chinmay25 Path Finder in Splunk Enterprise 08-24-2023 0 2	0	2
	Azure Stack - Splunk Add On for Microsoft Cloud Services Azure Stack - private regionsI wanted to ask/confirm that the Splunk Add On for Microsoft Cloud Services - for the pu... by chase-dafnis New Member in Splunk Enterprise 08-23-2023 0 0	0	0
	Why are there No logs on server but displaying in Splunk? Hi all, i have a question Index= app-data "cgth14678ghj" host= http:jbossserver source=application_data_http:jbossse... by Ash1 Communicator in Splunk Enterprise 08-23-2023 0 1	0	1