Smart AnSwerS #75

Hey there community and welcome to the 75th installment of Smart AnSwerS.

The “Where Will Your Karma Take You” contest officially ended this past Monday, and the winners were announced in a Splunk blog post by piebob earlier this week. BIG congratulations to sundareshr, skoelpin, and jkat54 for accruing the most karma points during the competition period, earning them each a free pass to .conf2016! If any of these guys have helped you solve your issues on Splunk Answers, be sure to thank them for being such awesome community contributors if you happen to cross paths. :)

Check out this week’s featured Splunk Answers posts:

How to encode a URL for a Hipchat notification alert action

» Continue reading

Winners of the 2016 Splunk Answers .conf Karma contest announced!

Those of you who have been around a while know that we have a Karma contest on Splunk Answers every summer.  This year, the contest took place from July 15th to August 15th, with the top 3* scorers getting free passes to .conf 2016 in Orlando!

Congrats to this year’s Answers Karma contest superstars:

These folks pushed hard to get as much Karma as possible in a single month, and their efforts helped a lot of people build their Splunk clue. Thank you, and CONGRATULATIONS!!! Might we suggest you apply for membership in the SplunkTrust? Applications close this Saturday!

Keep getting that Karma, and we’ll see you at …

» Continue reading

Smart AnSwerS #74

Hey there community and welcome to the 74th installment of Smart AnSwerS.

A Splunk Paper Aircraft Association was started up at HQ a couple weeks ago where each participant creates and launches their own paper aircraft every Friday afternoon. Weekly awards are given for longest distance traveled and duration in flight. There’s also a Splunker’s Choice Award for the most unusual, interesting, creative, or fun design. Last Friday, Director of Documentation ChrisG won top prize for his aircraft, winning in both categories of distance and duration. Congrats to the all-star!

Check out this week’s featured Splunk Answers posts:

Large lookup caused the bundle replication to fail. What are my options?

Support engineer rbal shared this Q&A with the …

» Continue reading

My Summer at Splunk

Over the course of one summer, I became a Splunk Product Owner.

Goals: My main goal this summer was to answer the question, “What does a product manager do?” If you asked me this question now, I would laugh and say, “A better question is what does a product manager not do?” I was lucky enough to have the guidance and mentorship of the Data Solutions Group, (specifically Jack Coates, Elias Haddad, and Marian Reynova) who gave me an enormous amount of responsibility and answered my endless questions as I navigated through the product management cycle.


Background: As a quick background, the Data Solutions Group makes add-ons. Every new type of data needs an add-on to normalize the input …

» Continue reading

Smart AnSwerS #73

Hey there community and welcome to the 73rd installment of Smart AnSwerS.

It has been almost a year since the very first members of the SplunkTrust Community MVP program were chosen by Rachel Perkins, Sr. Director of Community. SplunkTrustees have accomplished a lot of great work helping users through Splunk Answers, user groups, virtual .conf sessions, blogs, and giving talks at Splunk and industry events. It is now time for the next cohort for 2016-2017 to be selected by Rachel and the current members. Applications are now live as of last Friday, July 29th, and are due for submission by 12:01AM on Saturday, August 20th, 2016. Best of luck to …

» Continue reading

Smart AnSwerS #72

Hey there community and welcome to the 72nd installment of Smart AnSwerS.

The “Where Will Your Karma Take You” contest has been underway for two weeks now on Splunk Answers, and there is just a little over 2 weeks left to go! From July 15 to August 15, the top 3 users that earn the most karma points within this period will each earn a free pass to .conf2016. Best of luck to everyone and finish off strong!

Also, next Wednesday, August 3rd @ 6:30PM, the San Francisco Bay Area user group will be meeting at Splunk HQ. If you happen to be in the area, come join us! Visit the SFBA user group page to see what’s …

» Continue reading

2016-17 SplunkTrust applications open now!


The first year of the SplunkTrust is coming to a close, and it’s almost time to select members for the 2016-2017 year!  Applications will open this coming Friday, July 29th and close on Friday, August 19th.

What has the SplunkTrust been up to?

Over the past year, the 2015-16 SplunkTrust membership have shared their knowledge and enthusiasm with countless Splunk Community members around the world.  In addition to their presence on Splunk Answers and in our User Groups, check out the recordings of the monthly Virtual .conf session program the membership put together (by the time you read this, there will be at least one more). You can also find a number of excellent blog posts from the SplunkTrust membership here:

» Continue reading

Smart AnSwerS #71

Hey there community and welcome to the 71st installment of Smart AnSwerS.

There’s a lot of hustle and bustle going on as Splunkers, partners, and customers are preparing and reviewing presentations for .conf2016 just two months away. As we all wait in anticipation for the annual worldwide user conference, come join the community in a sneak peek of one of the sessions at next week’s July SplunkTrust Virtual .conf session. On Friday, July 29th @ 3:00PM Pacific time, SplunkTrustee Mason Morales will be giving a preview of his .conf2016 talk: Architecting Splunk for Epic Performance. Visit the meetup page to RSVP and access the WebEx link for the event.

Check out this week’s featured Splunk Answers posts:…

» Continue reading

Smart AnSwerS #70

Hey there community and welcome to the 70th installment of Smart AnSwerS.

Since expanding Splunk HQ with the addition of the new building next door, things have been eerily quiet as you walk through each floor since everyone has been spread out, leaving many Splunkers feeling distant and empty. People have been missing the energy and lively vibe when everyone was all together under one roof. It was finally decided that everyone in the old building would be consolidated into the new building. So in true Splunk fashion, we’ll be celebrating with a party tomorrow for one last hurrah in our 250 Brannan courtyard before the move to bid our farewell to the old building until it undergoes its new makeover!

Check …

» Continue reading

Gaining clarity: adding a visual line break between events

splunktrust(Hi all–welcome to the latest installment in the series of technical blog posts from members of the SplunkTrust, our Community MVP program. We’re very proud to have such a fantastic group of community MVPs, and are excited to see what you’ll do with what you learn from them over the coming months and years.
–rachel perkins, Sr. Director, Splunk Community)


Hi, I’m Mark Runals, Lead Security Engineer at The Ohio State University, and member of the SplunkTrust.

If your experience is anything like mine, there have been times when you’ve put together a query that has found events of interest to you–only to have to spend extra time scanning back and forth within the results to make sure …

» Continue reading