Splunk Enterprise

Community Activity

How to get the average number of users per hour over a bigger timeframe? I have a certain amount of events (generated every 5 min) for a set of websites and their user base and their country... by buttsurfer Path Finder in Splunk Enterprise 02-07-2023 0 1	0	1
Why during Remote Log Collection, am I getting "Unable to get wmi classes from host 'xxxx'? Hi everyone, I'm a newbie to Splunk. I installed Splunk Enterprise in a Server which is connected to AD. Other machin... by Srini1207 Engager in Splunk Enterprise 02-06-2023 0 4	0	4
Is there documentation for deployment? Dears, am now want to deploy splunk on our organization. is there any videos or documentation for that! I need to ... by ohoud New Member in Splunk Enterprise 02-05-2023 0 2	0	2
Why is there KVStore failure after upgrade to 9.0? After upgrading to Splunk 9.0 on a single instance, we occasionally get KV Store errors. CLI status shows: This me... by bigfatyeastroll Path Finder in Splunk Enterprise 02-05-2023 1 3	1	3
Disk error cluster indexers- is there a search that would help catch disk error? Today we have an onprime cluster with physical index servers. Usually our disks fail, leaving the cluster performance... by Nieri Loves-to-Learn Lots in Splunk Enterprise 02-03-2023 0 0	0	0
Do tokens need to be unique per user? I've created tokens with local authentication and shared the ID and password with the users of the applications needi... by w199284 Explorer in Splunk Enterprise 02-03-2023 0 0	0	0
How to resolve Splunk SSL certificate errors? Hello, I am trying to install SSL certificate for Splunk to permit HTTPS access to the console. As part of the proced... by sidtalup27 Explorer in Splunk Enterprise 02-03-2023 0 0	0	0
Unable to connect to a Splunk add-on API via Ansible I'm using Ansible to try to configure SPlunk Enterprise and more specifically- I want to create a user for the Splunk... by mp32 New Member in Splunk Enterprise 02-03-2023 0 1	0	1
What is the cause of this buckets error? Have a index that is throwing up a warning, and the Root Cause says The newly created warm bucket size is too large. ... by marka3721 Loves-to-Learn in Splunk Enterprise 02-02-2023 0 3	0	3
ERROR MongodRunner [9060 KVStoreConfigurationThread] - Failed to convert PEM to PFX Just putting this here for others who come across this problem since I got no results when I searched here.After upgr... by jeremyhagand61 Communicator in Splunk Enterprise 02-02-2023 1 5	1	5
How to set up a data input from my universal forwarder? I'm fairly new to Splunk and I am having some trouble setting up a data input from my universal forwarder. I've curre... by WildMufasa Loves-to-Learn in Splunk Enterprise 02-02-2023 0 5	0	5
Search Head Cluster: Failed HMAC signature match errors Hi, I am running a Search Head Cluster with 7 search heads on Splunk 8.2.9.2 of the search heads are generating the f... by a_kearney Path Finder in Splunk Enterprise 02-02-2023 0 0	0	0
Why doesn't kvStore lookup work, but join does? I've got a kvStore lookup, AD_Obj_user, defined with fields objectSid, OU, sAMAccountName, and others. It has case-i... by plaid_blanket Explorer in Splunk Enterprise 02-01-2023 0 2	0	2
Where can I learn about Splunk admin stuff? Dear Splunkers, I would like to inform you that, I am very curious to learn splunk admin, can anyone refer me good Yo... by Shakeer_Spl Explorer in Splunk Enterprise 01-31-2023 0 1	0	1
Help with Base search / Dashboard studio? Hello everyone, I have a question with base search in Splunk Dashboard Studio. I used this option to made my parent ... by anissabnk Path Finder in Splunk Enterprise 01-31-2023 0 0	0	0
Is it possible to forward log events from Splunk Forwarder to OpenTelemetry to Splunk? Hi Everyone! Recently, we are opting to standardize our monitoring solution. Upon our initial research and developmen... by Bryan_James Explorer in Splunk Enterprise 01-31-2023 0 1	0	1
Why is Splunk not working? Hello community, I am not able to load splunk hosted on my server in any other browser. Also not able to login into ... by Darsh1561 Explorer in Splunk Enterprise 01-31-2023 0 1	0	1
Why is PDF delivery is delivering, but dashboard is not scheduled to deliver? I am the owner of a dashboard that at one point was scheduled to deliver a PDF to small list of email addresses in my... by yarn_eng2023 New Member in Splunk Enterprise 01-31-2023 0 1	0	1
Why is linux script data showing the correct output but not getting correct data? Configured the script based app for the databases which brings the data as follows. As mentioned below. When I am ru... by SK2 Loves-to-Learn in Splunk Enterprise 01-31-2023 0 0	0	0
Unable to stop splunk service- Permission Denied? Unable to stop splunk service Permission Denied tried this both as root and as splunk user and getting permission d... by aasraoui Loves-to-Learn in Splunk Enterprise 01-31-2023 0 1	0	1
How to deploy a customized app via deployment server to execute a command? We want to deploy an custom app via deployment server which has to execute an command in all the universal forwarders... by pshelke Observer in Splunk Enterprise 01-31-2023 0 1	0	1
How to merge multiple index into single index? Hi splunk god, Have enquiry, i have an environment which heavyforwarder logs send to cluster indexer.I need the below... by jack_lai Observer in Splunk Enterprise 01-30-2023 0 2	0	2
How to tag event data based on patterns and keywords configured in a lookup csv parameter file? Hello Splunk experts, I would like to simplify some complex SPL queries that search for certain events and apply tags... by nathan_e New Member in Splunk Enterprise 01-30-2023 0 3	0	3
How to configure Splunk after migrating it into AZURE platform? Hi,We have clustered environment with 4 indexers and 4 Search heads ,1 cluster master,1 deployment server and 2 HF. W... by Ashwini008 Builder in Splunk Enterprise 01-30-2023 0 1	0	1
Is there another way to correctly map data to be CIM compliant? Hi I try to list the better ways to map not cCIM compliant data with the good datamodel Is there a better way to use ... by jip31 Motivator in Splunk Enterprise 01-30-2023 0 0	0	0