Troubleshooting Splunk Enterprise Security

Use this manual to troubleshoot Splunk Enterprise Security.

For an overview of the app and the analyst workflow, refer to the Use Splunk Enterprise Security manual.

For information on how to plan, install, deploy, upgrade, and pair Splunk Enterprise Security with other apps, refer to the Install and Upgrade Splunk Enterprise Security manual.

For information on how to configure Splunk Enterprise Security, refer to the Install and Upgrade Splunk Enterprise Security manual.

For information on telemetry, fixed issues, known issues, third party software credits, and so on, refer to the Splunk Enterprise Security Release Notes.

For information on inherited deployments, refer to the Splunk Enterprise Inherit a Splunk Enterprise Deployment manual.

Splunk Enterprise Security log files

Turn on debug logging for each component in Splunk Enterprise Security. For more information on log files, see the product documentation:

• Turn on debug logging in Splunk Enterprise Security
• Log files in Splunk Enterprise Security

Contact Splunk Support

This manual addresses more generic issues that you might see when using Splunk Enterprise Security. For issues that are specific to your configuration, contact Splunk Support.