Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: Need assistance regarding Splunk deployment on...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi ,
I'm currently engaged with a customer to deploy splunk components on their infrastructure. This seems to be a distributed environment. Please let me know what kind of queries do I need to put against the client(customer). Also please share if any doc is in place.
Thanks in advance.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @asm_coe,
What are you looking for exactly ? Deployment guides ? Or monitoring for the infrastructure ?
If it's a deployment guide/type of architectures have a look here for sizing :
https://docs.splunk.com/Documentation/Splunk/7.2.6/Deploy/Deploymentcharacteristics
If you're looking to monitor the infrastructure then make sure you have a monitoring console configured. You can find all the configuration for the MC here :
https://docs.splunk.com/Documentation/Splunk/7.2.6/DMC/Configureindistributedmode
Make sure all your components are visible from the MC to ensure that everything is monitored.
Cheers,
David
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @asm_coe,
What are you looking for exactly ? Deployment guides ? Or monitoring for the infrastructure ?
If it's a deployment guide/type of architectures have a look here for sizing :
https://docs.splunk.com/Documentation/Splunk/7.2.6/Deploy/Deploymentcharacteristics
If you're looking to monitor the infrastructure then make sure you have a monitoring console configured. You can find all the configuration for the MC here :
https://docs.splunk.com/Documentation/Splunk/7.2.6/DMC/Configureindistributedmode
Make sure all your components are visible from the MC to ensure that everything is monitored.
Cheers,
David
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks David, It was deployment manual which I was looking for.
Splunk Observability for AI
Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...
Splunk Observability as Code: From Zero to Dashboard
