Splunk Enterprise

Community Activity

How can I write a proper props for sample logs? Below are the sample logs, here i have 2 types of logs formats.for json logs i have given this props:[sourcetype]INDE... by Ash1 Communicator in Splunk Enterprise 05-19-2023 0 0	0	0
How to write regex? form the below logs i want to capture "appDesc" data using regex. 2023-05-02 22:27:20,100 \| info application statu... by Ash1 Communicator in Splunk Enterprise 05-19-2023 0 1	0	1
App Upgrade GUI- Getting internal server error? Hi all, When I visit the Apps page on my search head server and select "Upgrade to ..." on any of my applications tha... by pglover Engager in Splunk Enterprise 05-19-2023 0 6	0	6
How to restrict particular month? Hi ,I have to restrict 2023-05 date field . This is used as filter in the dashboard. Can some one help me provide the... by Keerthi Path Finder in Splunk Enterprise 05-19-2023 0 4	0	4
Why am I unable to correct the timestamp with microseconds? Dear Team, Below is the raw log for your reference: {"kind":"Event",*****************,*,"stageTimestamp":2023-05-... by vprasadeee_7 Explorer in Splunk Enterprise 05-19-2023 0 2	0	2
How to get unique data? Hi All,I have a query and the results shows as above. The column function as only single value. I need to get only on... by Keerthi Path Finder in Splunk Enterprise 05-18-2023 0 7	0	7
What is the cause of the error I am getting with Splunk Add-on for New Relic? Hi, Please let us know how to address the issue of Splunk Add-on for New Relic not working properly.https://apps.splu... by tabata999 New Member in Splunk Enterprise 05-18-2023 0 0	0	0
Why is DHCP log not parsing properly? Hi, i have parsing issue on window DHCP log. Im using splunk add on for Window DHCP. The raw log are as below. 1030,0... by Akmal57 Path Finder in Splunk Enterprise 05-17-2023 0 4	0	4
Unable to update app using GUI Hi all, when I try to update any installed apps from the GUI I receive a 500 internal error.Checking the _internal lo... by Mark_H New Member in Splunk Enterprise 05-17-2023 0 1	0	1
Why Splunk indexers crash with third party S2S client and useACK=true? Crash logCrashing thread: FwdDataReceiverThread Registers: RIP: [0x00007F412B89E70F] gsignal + 271 (libc.so.6 +... by hrawat Splunk Employee in Splunk Enterprise 05-16-2023 1 1	1	1
When will Splunk Essentials for Cloud and Enterprise 9.0 be compatible with jQuery 3.5? Every week the Upgrade Readiness Scan says that Splunk Essentials for Cloud and Enterprise 9.0 is incompatible with j... by gregbo Communicator in Splunk Enterprise 05-16-2023 3 6	3	6
How to make data event correlation automatic? Hello Guys, I have some doubt about data event correlation. i am getting events from different different security ve... by Jeewan Explorer in Splunk Enterprise 05-16-2023 0 1	0	1
Why is splunk rex backreference not working as expected? Hi All.. was struggling to find out the backreference of regular expressions, but not working as expected. lets say ... by inventsekar SplunkTrust in Splunk Enterprise 05-15-2023 0 7	0	7
How to copy and insert row? For the below table, whenever a comparison_result column value is equal to "not equal", it should copy the correspond... by Kirthika Path Finder in Splunk Enterprise 05-13-2023 0 2	0	2
Using btool to find an index in a monitor stanza Hi, I am trying to use btool to find an index that is used in an inputs.conf:./splunk btool inputs list --debug \| gre... by joe06031990 Communicator in Splunk Enterprise 05-12-2023 0 1	0	1
which is the suitailbe app for AWS Dashboard in Splunk enterprise? Hello team,As Splunk app for AWS not working or its EOS.Which is the another suitable app for AWS Dashboard in Splunk... by nikhilmfwd Path Finder in Splunk Enterprise 05-11-2023 0 0	0	0
Why can't I access Splunk web? HI Team, Created AWS EC2 and installed Splunk Enterprise in ubuntu successfully, splunk service and ports are runni... by Veeraboina Observer in Splunk Enterprise 05-11-2023 0 1	0	1
Is there a way to setup view-only_settings for dashboards in Dashboard Studio for Splunk Enterprise? Hi, Is there a way to setup view-only_settings for dashboards in Dashboard Studio for Splunk Enterprise? For Splunk C... by LRF Path Finder in Splunk Enterprise 05-11-2023 0 2	0	2
Why is Splunk universal forwarder crashing randomly? Hello, I have an issue with my Splunk Universal Forwarder as it keeps randomly stopping on Windows server without any... by daniaabujuma Explorer in Splunk Enterprise 05-11-2023 0 6	0	6
How to install Splunk UFs to Windows centralized and securely? Hi, all! We want to install Splunk UFs to about 200 Windows Servers, process should be centralized and secured.1. We ... by Zhanali Path Finder in Splunk Enterprise 05-10-2023 0 1	0	1
Why am I unable to send emails with attachment using python script? I tried to migrate my python scripts for Splunk to send out emails with attachments from python2 to python3. In pytho... by Ruki Loves-to-Learn in Splunk Enterprise 05-10-2023 0 0	0	0
Cannot upgrade Splunk 8.2.9 to version 9.0.4 Description: I can't seem to find the sequence of commands to upgrade the data store to wireTiger on this Ubuntu VM... by splunkquestion1 New Member in Splunk Enterprise 05-10-2023 0 0	0	0
Help with splunk query to alert server status from down to up? Hi All,I have created an alert which checks the status of the server and if it down, then alert will be triggered. Qu... by vinothkumark Path Finder in Splunk Enterprise 05-10-2023 0 1	0	1
Help with rex field extraction? Hi All, I have two events as below. In both the events, data format is different. We can observe extra "/" from few e... by Allampally Path Finder in Splunk Enterprise 05-10-2023 0 5	0	5
How prevent to see "Apps" to user in splunk enterprise 9.0.2? Hello team, Please help me out for this, i made one view-only role & attached to user. My requirement is when that us... by nikhilmfwd Path Finder in Splunk Enterprise 05-10-2023 0 4	0	4