The “Gotchas” of Splunk: users beware!
What are the “Gotchas” in Splunk? They are little mistakes that are easy to make, difficult to notice/identify and that cause significant problems. I will give you a few examples based on my own experience. These are problems that are so devious that they are frequently reported to Splunk as bugs but which turned out not to be bugs at all.