Using Splunk

Using Splunk
Category Activity
chenfan
Hello Splunkers,I've been having issues with Dashboard Studio lately that have been bothering me. I'd really apprecia...
by chenfan Path Finder in Dashboards & Visualizations 12-31-2025
0 5
0
5
Didalready
When I use the search below, the event is 25 days ago, set search to last 30 takes 10 seconds, set to 90 days takes 2...
by Didalready Explorer in Splunk Search 12-29-2025
0 1
0
1
ThuLe
Hello everyone,I am trying to create a custom report that lists Investigations alongside the Notable Events (Findings...
by ThuLe Explorer in Splunk Search 12-29-2025
0 5
0
5
chenfan
Hi SplunkersHow to configure Dashboard Studio to display a % symbol after the numbers on the Y-axis, for example, 15%...
by chenfan Path Finder in Dashboards & Visualizations 12-29-2025
0 4
0
4
satyaallaparthi
Hi everyone,I need some help with a SPL query.I am trying to create an inventory of all queries running in my dashboa...
by satyaallaparthi Communicator in Splunk Search 12-27-2025
0 9
0
9
dtaylor
I'm working with a search that starts by filtering for all process events in Windows and then sending them to a looku...
by dtaylor Path Finder in Splunk Search 12-26-2025
0 2
0
2
b17gunnr
Hello folks,I am trying to customize the drilldown options for panels created in Dashboard Studio. My panel works and...
by b17gunnr Path Finder in Dashboards & Visualizations 12-24-2025
0 1
0
1
darrfang
Hey Splunk team, I have a data similar to this:| makeresults | eval data="ABC,10,15;DEF,12,13;GHI,11,14" | makemv del...
by darrfang Explorer in Dashboards & Visualizations 12-23-2025
0 5
0
5
bmer
Hi,Iam using below splunk to help identify least common values of runTime field in myEventRecType file . i get the re...
by bmer Explorer in Splunk Search 12-22-2025
0 4
0
4
andrewpense825
Good day, I often run up against the issue of wanting to drag the text of a field name from the browser into a separa...
by andrewpense825 Explorer in Splunk Search 12-18-2025
1 4
1
4
JohnEGones
Hi Team,I have been trying to work on a query I found on a blog that was trying to calculate and tag a week over week...
by JohnEGones Communicator in Splunk Search 12-17-2025
0 4
0
4
nawazns5038
how can we get the oldest index time of an index ? Does retention policy depend on indextime or _time ?
by nawazns5038 Builder in Splunk Search 12-17-2025
1 20
1
20
bpenny
Executive overview: We're using Splunk Cloud (Victoria Experience), and we're in the process of spinning up a new ins...
by bpenny Explorer in Splunk Search 12-15-2025
0 1
0
1
tobelesp
After we upgraded to v9.0.1 we get a warning when following dashboard-generated links pointing "outside" splunk: Re...
by tobelesp Engager in Dashboards & Visualizations 12-15-2025
3 41
3
41
Souradip11
Hello Splunkers,Is it possible to group events based on a sequence. Event 1 - request , request_id 123Event 2 - respo...
by Souradip11 Explorer in Dashboards & Visualizations 12-14-2025
0 8
0
8
tscroggins
Hi Splunkers!In the current json_extend documentation <https://help.splunk.com/en/splunk-enterprise/spl-search-refere...
by SplunkTrust SplunkTrust in Splunk Search 12-14-2025
0 5
0
5
samp
I'm trying to create SPL so I can enter multiple values on a Domain text filter. For example, I'd like to enter somet...
by samp Engager in Dashboards & Visualizations 12-12-2025
0 1
0
1
agneticdk
Hi guys   I have an installation on Splunk 8.1.2 where we have XmlWinEventLog data ingested. When we run this search:...
by agneticdk Path Finder in Splunk Search 12-12-2025
1 4
1
4
ajmach343
Hello!SOC analyst here. I am looking to build a dashboard that gives data and statistics when an alert in Incident re...
by ajmach343 Explorer in Splunk Search 12-12-2025
0 2
0
2
wingfieldj
index=endpoint_ms_winevents sourcetype=XmlWinEventLog user=TESTER EventID=4624 OR EventID=4634| stats earliest_time(_...
by wingfieldj Explorer in Splunk Search 12-12-2025
0 6
0
6
nelakolundzija
Since Microsoft Teams is deprecated 0365 connectors standard incoming webhooks and usage of MessageType cards for sen...
by nelakolundzija Engager in Alerting 12-11-2025
6 2
6
2
Kimiko
Hi Splunk Community,I have created the following SPL for scheduled alerts. Some parts are masked for confidentiality,...
by Kimiko New Member in Splunk Search 12-10-2025
0 4
0
4
chrishartsock
Hello all, Certain users in our environment seem to be able to run searches utilizing the "sendemail" command while ...
by chrishartsock Path Finder in Reporting 12-10-2025
0 5
0
5
bjhenrick
I am new to using Splunk and I am running a report to list all Teams meetings that were recorded over the past 6 mont...
by bjhenrick Engager in Dashboards & Visualizations 12-10-2025
0 3
0
3
muzicman0
I have created a basic dashboard (I am just learning how all this works) and I am mostly happy with it.  The one issu...
by muzicman0 Loves-to-Learn in Dashboards & Visualizations 12-10-2025
0 5
0
5
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.
Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...
Top Karma Authors