Using Splunk

Using Splunk
Category Activity
Ben
Hello,As a SOC analyst, what are the best practices for writing SPL queries to quickly find specific data (such as an...
by Ben Explorer in Splunk Search 02-27-2025
0 2
0
2
LizAndy123
So I had help before that after a search I could send a report on a schedule and send a token to a mattermost channel...
by LizAndy123 Path Finder in Splunk Search 02-27-2025
0 2
0
2
TheEggi98
Hi fellow splunkers,recently i deployed WinPrintMon inputs to our printserver, to check driver versions and found out...
by TheEggi98 Communicator in Splunk Search 02-26-2025
0 2
0
2
Raja_Selvaraj
Hi Everyone,Can someone please help me with Splunk query to show difference of two values in timechart for the period...
by Raja_Selvaraj Explorer in Dashboards & Visualizations 02-26-2025
0 5
0
5
nkavouris
I have a field message in _raw that looks something like this:"message":"test::hardware_controller: Unit state update...
by nkavouris Path Finder in Splunk Search 02-26-2025
0 12
0
12
Cheng2Ready
I have a Holiday.csv file that imports dates for specific holiday dates.example:2024-04-012026-12-292028-06-26I am wo...
by Cheng2Ready Communicator in Splunk Search 02-26-2025
0 11
0
11
LizAndy123
So I have my Query working and I have a webhook created in a ChannelIt says that I can send Tokens when I send the Al...
by LizAndy123 Path Finder in Splunk Search 02-26-2025
0 3
0
3
Racer73b
Hi All,I'm having trouble getting conditional formatting to work for a column chart in dashboard studio.   I want som...
by Racer73b Explorer in Dashboards & Visualizations 02-26-2025
0 1
0
1
paulcurry
I would like to get a count of events of all data ingested for 2024.  I have hundreds of indexes and all data over 90...
by paulcurry Path Finder in Splunk Search 02-26-2025
0 2
0
2
boknows
Hello,I have logs coming in with the host showing as the UF.  I want to replace the host value with some event data.H...
by boknows Explorer in Splunk Search 02-26-2025
0 9
0
9
Roy_9
Hello,I am looking to download Forwarder package  windows ARM for Surface 7 laptops and not finding the link, please ...
by Roy_9 Motivator in Splunk Search 02-26-2025
0 1
0
1
ak9092
Hi, I am having hard time extracting multi value fields present in an event using transforms mv_add=true, it seems t...
by ak9092 Path Finder in Splunk Search 02-26-2025
0 5
0
5
-Splunkuser
Hello Everyone, I'm experiencing a problem with the latest version of Missile Map (1.6.0). The animated arrows remain...
by -Splunkuser New Member in Dashboards & Visualizations 02-25-2025
0 2
0
2
nkavouris
I need help building a proper rex expression to extract the bold text from the following raw data{"bootcount":8,"devi...
by nkavouris Path Finder in Splunk Search 02-25-2025
0 6
0
6
secure
i have a field coming after a calculation  like a percentage field the request from user is to display in text format...
by secure Path Finder in Splunk Search 02-25-2025
0 1
0
1
LogUx
Hello Splunkers!!I have a Splunk dashboard where I am using a drilldown to dynamically load images from a media serve...
by LogUx Motivator in Dashboards & Visualizations 02-25-2025
0 4
0
4
Gil
Hi there,I'm trying to create a new role that can give permission to some users (who has the basic inheritance role) ...
by Gil Explorer in Dashboards & Visualizations 02-25-2025
0 6
0
6
Singh10
Hi, I have this Splunk SPL:  index=EventViewer source="WinEventLog:Application" SourceName=sample | table host Name, ...
by Singh10 Explorer in Splunk Search 02-25-2025
0 4
0
4
ITSplunk117
We have a dashboard a user is having a problem with which I have been able to replicate some of the time.They have a ...
by ITSplunk117 Path Finder in Dashboards & Visualizations 02-25-2025
0 0
0
0
pipehitter
Hi everyone,does anybody know if there is a possiblity to set the dropdown-width of an input in Dashboard Studio ?Thi...
by pipehitter Explorer in Dashboards & Visualizations 02-25-2025
0 1
0
1
splunker011
Hi I am currently trying to reference an SPL variable in simple xml for a table panel in a dashboard. I would like ea...
by splunker011 Loves-to-Learn Lots in Dashboards & Visualizations 02-25-2025
0 6
0
6
nkavouris
I have a reliable base query to find events containing the information I want.I built a rex using the field extractor...
by nkavouris Path Finder in Splunk Search 02-24-2025
0 2
0
2
Johnsonbc
ALCON,Hello, I am having issues with printmon query results not showing the proper results for "total_pages".  The pa...
by Johnsonbc Explorer in Splunk Search 02-24-2025
0 3
0
3
mrkhan48
Currently when I open the dashboard for the first time, dropdown starts searching and after a few seconds it returns ...
by mrkhan48 Path Finder in Dashboards & Visualizations 02-24-2025
0 2
0
2
Alan_Chan
I have both Chinese and English field names from the Windows event log, and I would like to use field aliases so that...
by Alan_Chan Explorer in Alerting 02-24-2025
0 1
0
1
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...
Top Karma Authors