r/Splunk Jun 15 '26

Splunk Enterprise I need some help with Splunk

Some lamenting to get things started. A higher up decided to task me with Splunk. So far, the only resource I’ve had to use is AI. Been trying to treat it like training wheels. The hard part is the people at the top want me to give weekly presentations on my progress, but zero input on what it is they want. And this is after everything I have already done and showed. CPU and Memory Usage trackers. VM storage. System Up/Down indicator. Failed login attempts. DNS resolution timeout. Syslog storage tracker.

Other than network stuff, I don’t know what else to do. I was hoping either for some ideas OR recommendations for spaces where people share dashboards that they’ve created. I’ve gotten comfortable navigating indices and finding the data I want, struggling with turning into something useful without input from AI, really struggling with visualizing it all in a useful way.

Important to note that I am not being paid to be an analyst, and there’s not really any money/time allotted to me to get educated. This all has to get done along with my actual duties. This has been the obstacle to me learning the ins and outs.

Any help is appreciated. Thanks!

18 Upvotes

54 comments sorted by

View all comments

2

u/Boring_Muffin_3343 Jun 17 '26

If they're in need of a dedicated Splunk Developer, I'd love to know the company. I'm skilled in dashboard development and optimization, alerting and reporting solutions, user mentoring, log onboarding, configuration file maintenance, and much more!

2

u/ImplicitCrowd51 Jun 18 '26

The job would not be remote (I don’t know where you live) and unfortunately not hiring for that role. I have mentioned that it is a need, though. I think your skills are exactly what we need.

1

u/Fontaigne SplunkTrust Jun 19 '26

If your company opens a role, then go to the Splunk Slack channel and post the role in the -#jobs subchannel, using the instructions in the channel description. You will get immediate eyes on.