Using Splunk

Using Splunk
Category Activity
genesiusj
Hello,We have a lookup csv file: 1 million records (data1); and a kvstore: 3 million records (data2). We need to comp...
by genesiusj Builder in Splunk Search 08-13-2025
0 8
0
8
Yoavraham14
Hi,In Splunk Classic (Simple XML) dashboards, a delimiter property could be set for a multi-select input to control h...
by Yoavraham14 New Member in Dashboards & Visualizations 08-13-2025
0 3
0
3
maigaard
Dear Splunk gurusI am trying to get the lookup command to accept the lookup table name from a variable. Example: | ev...
by maigaard New Member in Splunk Search 08-12-2025
0 4
0
4
dmoberg
I have noticed that chart legends are truncated to 9-10 items where the remaining items simply are not shown. Is it p...
by dmoberg Path Finder in Dashboards & Visualizations 08-12-2025
0 1
0
1
isac_santana
Good afternoon,I need help changing the colors of two columns in my <panel>.I need to change the colors of the "Value...
by isac_santana Explorer in Splunk Search 08-12-2025
0 2
0
2
sagarikamahalik
Hi, I’m looking for a way to migrate Splunk cloud alerts (saved searches) from one environment to another.For my case...
by sagarikamahalik New Member in Splunk Search 08-12-2025
0 1
0
1
eholz1
Hello All,Thanks for the help this forum provides.I have a table in dashboard studio. I can set the backgrould color ...
by eholz1 Builder in Dashboards & Visualizations 08-12-2025
0 4
0
4
RanjiRaje
| loadjob savedsearch="userid:search:hostslists"| lookup lookupname Hostname as host OUTPUTNEW Hostname,IP| eval Host...
by RanjiRaje Explorer in Splunk Search 08-12-2025
0 5
0
5
RonaldCWWong
Hi community,I have a question on counting the number of events per values() value in stats command.For example havin...
by RonaldCWWong Explorer in Splunk Search 08-10-2025
0 4
0
4
bwheelerice1
We currently have a search that shows a timeline graph of daily SVC usage by index. 10 of these indexes are our highe...
by bwheelerice1 Loves-to-Learn Lots in Splunk Search 08-10-2025
0 6
0
6
LOP22456
We have a search app that a group of users are working from. All of the users have power role and we have given the p...
by LOP22456 Explorer in Splunk Search 08-08-2025
0 6
0
6
DanielPriceUK
I need a way to stop users with access to a Studio dashboard from being able to clone it. From this they are able to ...
by DanielPriceUK Path Finder in Dashboards & Visualizations 08-08-2025
1 2
1
2
SN1
hello i have a search and i want only latest result of this search . ok so the problem is for 1 DeviceName there are ...
by SN1 Path Finder in Splunk Search 08-07-2025
0 11
0
11
Wooly
Currently using Dashboard classic and added Markdown Text to the bottom of my pie chart to inform the user when the d...
by Wooly Explorer in Dashboards & Visualizations 08-07-2025
0 5
0
5
danielbb
I have this regex -^(?:[^ \\n]* ){7}(?P<src_host>[^ ]+)[^:\\n]*:\\s+(?P<event_id>[a-f0-9]+:\\d+)(?:[^/\\n]*/){2}(?P<d...
by danielbb Motivator in Splunk Search 08-07-2025
0 1
0
1
Sudhagar
Hello Team, I have a panel which is having table visualization when clicked it has to parse value from this panel to ...
by Sudhagar Loves-to-Learn Everything in Dashboards & Visualizations 08-06-2025
0 7
0
7
danielbb
Does anybody know where the failures of sendemail are being logged? I wonder about cases where the e-mail address no ...
by danielbb Motivator in Splunk Search 08-06-2025
0 8
0
8
JH2
I will start by saying that I am very new to Splunk - so I could be missing an obvious step.     Please forgive me......
by JH2 Loves-to-Learn in Dashboards & Visualizations 08-06-2025
0 6
0
6
R15
One of my alerts is having an issue with the email link to the results not working. I get a 404 that says Oops. Page ...
by R15 Communicator in Alerting 08-05-2025
0 10
0
10
splunklearner
<form version="1.1" theme="light"> <label>Dashboard</label> <!-- Hidden base search for dropdowns --> <search id="bas...
by splunklearner Communicator in Dashboards & Visualizations 08-04-2025
0 30
0
30
Diana_a
Hi everyone!I am new with Splunk and probably this should be really easy for many of you. I am trying to left join a ...
by Diana_a Explorer in Splunk Search 08-03-2025
0 3
0
3
kuul13
I have tried to write a query that outputs the transaction counts, and response times but not sure how to group it by...
by kuul13 Explorer in Splunk Search 08-01-2025
0 4
0
4
D2SI
Hello there! I am working on a App I am willing to publish on Splunkbase. I do like the dark mode one click feature s...
by D2SI Communicator in Dashboards & Visualizations 08-01-2025
0 9
0
9
alvinsullivan01
I have issue to transform data and extracting the fields value. Here is my sample data.2025-07-20T10:15:30+08:00 h1 t...
by alvinsullivan01 Explorer in Splunk Search 08-01-2025
0 16
0
16
neerajs_81
Hello All,  Below is my dataset from a base query. How can i calculate the average value of the column ?Incidentavg_t...
by neerajs_81 Builder in Splunk Search 07-31-2025
0 9
0
9
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors