Splunk Enterprise

Community Activity

How to Distribute and update "manually" created lookup file in the SHC? Hello to everyone.I need to distribute a *.csv file that was created by a certain script (not with the help of Splunk... by NoSpaces Contributor in Splunk Enterprise 02-06-2026 1 7	1	7
Searchbar within Dashboard Hi,Is it possible to add a search bar to a dashboard I built, much like the one in the Search & Reporting app? I need... by verd4nd1 Engager in Splunk Enterprise 02-06-2026 0 1	0	1
Can srchFilter use lookups dynamically? Hello,Hello,I have 4000 SAML users and need to apply search restrictions dynamically from a lookup table.Question: Do... by User_Spl New Member in Splunk Enterprise 02-04-2026 0 4	0	4
MONGODB vulnerability in ZLIB Hello.Recently a critical vulnerability was found in ZLIB of MongoDB.https://www.cyber.gov.au/about-us/view-all-conte... by verbal_666 Builder in Splunk Enterprise 02-03-2026 0 8	0	8
Missing logs Hi everyone, I'm facing an issue on my Splunk environment and I'd like your advice.After an upgrade, I noticed that I... by BRFZ Communicator in Splunk Enterprise 02-02-2026 0 2	0	2
Delayed searches in SHC - Abnormal amount of searches on captain Have a nice day everyone.Recently I made minor changes in the search schedule and spread the searches a bit.I thought... by NoSpaces Contributor in Splunk Enterprise 02-01-2026 0 1	0	1
Exploring AI-Driven Analytics to Enhance Data Insights Hi everyone, I wanted to share some awareness around AI-driven analytics and how it can help us get better value from... by rom_c New Member in Splunk Enterprise 02-01-2026 0 0	0	0
Changing Email Results link Hello,When I create an email alert and allow the link to result, the link automatically takes the search head URL.the... by melshobary Loves-to-Learn in Splunk Enterprise 02-01-2026 0 2	0	2
What type of backup should I take when I upgrade Core from 9.3.3 to 9.3.8? I'm planning to upgrade Core and the UFs from 9.3.3 to 9.3.8, how should I take my backups prior to the upgrade (Unix... by danielbb Motivator in Splunk Enterprise 01-30-2026 0 3	0	3
Does Splunk Forwarder 10.2 really require AVX? Hi,we are upgrading our Splunk to version 10.2 and one of Forwarders refused to update because of:* Active KVStore ve... by mpavlas Explorer in Splunk Enterprise 01-29-2026 0 3	0	3
Upgraded to ES 8. Unable to Print investigations Hello,Today we were upgraded to ES 8 but we don't see the option to print investigations anymore. Is that still an op... by JPR Observer in Splunk Enterprise 01-28-2026 0 1	0	1
upgrading from 9.1.5 to 10.0.2 I have an on-prem Splunk Deployment Server (DS) that's acting as a slave DS. This slave DS is version 9.1.5 and the m... by mhoffman1 New Member in Splunk Enterprise 01-28-2026 0 1	0	1
Dashboard "underLabel" option to appear on two separate lines Hi all. I have this code:<option name="underLabel">$END_BATCH_TEXT$ Job scheduled: TEST_BATCH1</option>I would like t... by Dinkos Engager in Splunk Enterprise 01-27-2026 0 2	0	2
Debug message SHCSlave getSearchConcurrency useTotalSearchConcurrency=0 Hello,I have a debug log on only one SH of my SHC.componentSHCSlaveevent_messagegetSearchConcurrency useTotalSearchCo... by Solitus31 Explorer in Splunk Enterprise 01-27-2026 0 2	0	2
Splunk Cloud HEC - Could not connect to server Hello everyone,I have a Splunk Cloud trial and I've configured an HTTP Event Collector (HEC), but when I run tests wi... by Abel07 Explorer in Splunk Enterprise 01-26-2026 0 5	0	5
Remove button for AI Assistant in Splunk Enterprise Hello,We have recently upgraded Splunk Enterprise, on-prem. We now have a button for AI Assistant next to the search ... by hettervik SplunkTrust in Splunk Enterprise 01-26-2026 0 1	0	1
Source metadata disappeared from Windows Events in Search I have a problem that had occurred a little while ago, the metadata for source has disappeared from all windows event... by Ian0706 Explorer in Splunk Enterprise 01-24-2026 0 5	0	5
Fortimail TA Updated release? Unfortunately, the FortiMail add-on has been deprecated and hasn’t been updated for a long time.Would it be possible ... by vinz2020 Explorer in Splunk Enterprise 01-23-2026 0 1	0	1
Can I upgrade the UF from 9.3.3 to 9.3.8 prior to the Splunk Core upgrade itself? I am upgrading my entire Splunk environment from version 9.3.3 to 9.3.8. Is it okay to upgrade my Universal Forwarder... by danielbb Motivator in Splunk Enterprise 01-22-2026 0 2	0	2
FortiGate Sourcetype (frt_log vs fortigate_log) and Network_Traffic Data Model Mapping Hi there,We noticed that FortiGate logs are not being tagged correctly and therefore are not being included in the Ne... by imst27 Loves-to-Learn Lots in Splunk Enterprise 01-22-2026 0 1	0	1
How can we get New Relic Data into Splunk? Can anyone help me with the procedure please. Hi All,We wanted to collect Events/Metrics/Data/Logs from New Relic and send it to Splunk Enterprise and Splunk ITSI ... by Mritunjay Observer in Splunk Enterprise 01-22-2026 0 3	0	3
Postgtres binary vulnerabilities - is it same to remove There seems to be a lot of vulnerabilities surrounding the postgres binary shipped with Splunk Enterprise.I'm trying... by smithy001 Explorer in Splunk Enterprise 01-20-2026 0 3	0	3
Data Gets Deleted Hi,Not a pro, but I've configured a Splunk Enterprise on my non-profit's Azure server.I'm conducting an educational c... by Opher Engager in Splunk Enterprise 01-20-2026 0 4	0	4
Daily license usage exceeded Hello everyone, We have noticed a sudden and unexpected increase in daily license usage in our Splunk environment ove... by BRFZ Communicator in Splunk Enterprise 01-19-2026 0 2	0	2
SPL Query Logic - Events stopped Receiving to Splunk Hello Splunkers, I'm looking for a logic suggestion for building SPL query.Scenario: Alert/report when data feed stop... by aathma New Member in Splunk Enterprise 01-18-2026 0 3	0	3