Troubleshooting Manual


What's in here?

NOTE - Splunk version 4.x reached its End of Life on October 1, 2013. Please see the migration information.

What's in here?

Welcome to the Splunk Enterprise Troubleshooting Manual!

Use this manual to troubleshoot your instance of Splunk.

As with all Splunk docs, use the comment box feedback link at the bottom of each page to make any suggestions.

Here's a brief description of each chapter you see in the left navigation bar:

First steps

Get oriented here. Find some tips about where to start with your troubleshooting.

Splunk log files

Splunk Enterprise logs all sorts of things about itself. Find out what, where, and how in this section.

Contact Splunk Support

We're here to help! If you're stuck, do contact us! Details and tips in this section.

Some common scenarios

This section includes some of the most common scenarios we see in Splunk Support, with suggestions about what to do. Much more material is in the works here!

Make a PDF of this manual

If you'd like a PDF of this manual, click the red Download the Troubleshooting Manual as PDF link in the table of contents bar on the left side of this page. A PDF version of the manual is generated on the fly for you, and you can save it or print it out to read later.

This documentation applies to the following versions of Splunk: 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 , 4.3.3 , 4.3.4 , 4.3.5 , 4.3.6 , 4.3.7 , 5.0 , 5.0.1 , 5.0.2 , 5.0.3 , 5.0.4 , 5.0.5 , 5.0.6 , 5.0.7 , 5.0.8 , 5.0.9 , 5.0.10 , 6.0 , 6.0.1 , 6.0.2 , 6.0.3 , 6.0.4 , 6.0.5 , 6.0.6 , 6.1 , 6.1.1 , 6.1.2 , 6.1.3 , 6.1.4 , 6.2.0 View the Article History for its revisions.

You must be logged into in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!