All Apps and Add-ons

Stitch logs from multiple splunk instances to one instance

vinforever
Engager

Dear Users,

Need some insights here to solve the issue with consolidating logs into one instance. 

I have multiple splunk instances hosted into different servers and the distributed application logs the respective data into these servers. Now, i would like to get all these logs from different splunk instances to one single instance so that i can have end to end monitoring established and generate report/dashboard. 

Labels (3)
0 Karma

vinforever
Engager

Thanks @manjunathmeti for your response. i will try your recommendation. 

0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

hi @vinforever,

You can configure a centralized Search head to search the data across multiple indexer servers or indexer clusters. Check below links to configure:

https://docs.splunk.com/Documentation/Splunk/8.1.3/DistSearch/Configuredistributedsearch

https://docs.splunk.com/Documentation/Splunk/8.1.3/Indexer/Configuremulti-clustersearch#:~:text=Conf....

 

If this reply helps you, a like would be appreciated.

Get Updates on the Splunk Community!

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...