Deployment Architecture

Community Activity

Distributed Environment - Agent Management - shows forwarders as 0 even though the forwarders are connected. Distributed Environment - Agent Management - shows forwarders as 0 even though the forwarders are connected. The rele... by varunkulkarni16 New Member in Deployment Architecture 7 hours ago 0 1	0	1
Splunk Sizing: CPU and RAM Hi Everyone,I hope all is well.As Splunk consultant, how can you estimate the required hardware specs such as CPU and... by 0xAli Path Finder in Deployment Architecture Friday 0 6	0	6
The problem of archiving multiple copies: Indexer Cluster Dears,I hope all is well.As per the below:https://help.splunk.com/en/data-management/manage-splunk-enterprise-indexer... by 0xAli Path Finder in Deployment Architecture Wednesday 0 2	0	2
What are the best practices for implementing Smartstore? Hi All, I am planning to implement SmartStore in my current splunk environment and wanted to know if i am only doing ... by Chiranjeev88 Explorer in Deployment Architecture a week ago 0 6	0	6
Communication Matrix: From UF to DS Dear All,Just to confirm the below"UFs call the Deployment server and ask for their apps, the deployment server never... by 0xAli Path Finder in Deployment Architecture a week ago 1 9	1	9
KV Store startup failure: Failed to import PFX file into Keychain I just upgraded Splunk to 10.4 (10.2.2 x86_64 to 10.4 arm64) on macOS, and the previously working KVStore now does no... by i0ntempest Loves-to-Learn in Deployment Architecture a week ago 0 7	0	7
Splunk Sizing Hi,Seems like this link below is no longer working.https://splunk-sizing.appspot.com/ Does Splunk have online splunk ... by jaracan Communicator in Deployment Architecture 2 weeks ago 0 5	0	5
Windows Event Forwarding (WEF) Subscription Issue in Workgroup Environment Hi Everyone,I'm building a lab to centralize Windows Event Logs before sending them to Splunk. The objective is to co... by _Raj Path Finder in Deployment Architecture 2 weeks ago 0 1	0	1
Not to use RAID5 on SSD when using SmartStore. Why avoid RAID5 on SSD when using SmartStore? by rbal_splunk Splunk Employee in Deployment Architecture 3 weeks ago 0 2	0	2
My servers class Agent allways in Pending status For some time now, the class server agents on my deployment server have been in Pending status, and yet the logs are ... by Elbald97 Explorer in Deployment Architecture 3 weeks ago 0 1	0	1
How to obtain an archived Splunk Enterprise 9.0.x Windows x64 MSI for a supported upgrade path? Hi everyone,I'm planning to upgrade a standalone Splunk Enterprise Heavy Forwarder running on Windows Server 2022.Cur... by Jamol_S New Member in Deployment Architecture 3 weeks ago 0 2	0	2
How Do Users Access Multiple Search Head Clusters (ES and General Purpose) If we have two separate Search Head Clusters, one dedicated to Splunk Enterprise Security (ES) and another for genera... by Nrsch Explorer in Deployment Architecture 4 weeks ago 0 4	0	4
Not able to have a "no downtime" upgrade now that we use two index clusters Ran into some issues upgrading our lab splunk environment and now I am concerned and hesitant to upgrade our prod clu... by briancronrath Contributor in Deployment Architecture a month ago 0 1	0	1
Edge processor data management issue on fresh splunk core 10.2.4 linux instance Hello, can't add Edge processor, also getting errors on health status regarding data management : Thanks. by splunkreal Influencer in Deployment Architecture 06-15-2026 0 5	0	5
Data Management App - Edge Processor Setup Fails with 502 "Connection Refused" on Fresh On-Prem Deployment Hello,I'm trying to configure Edge Processor using the Data Management App. However, whenever I enable it, I encounte... by Mohamamd_Mir Explorer in Deployment Architecture 06-14-2026 0 2	0	2
LM and MC co-location , forward traffic to indexer layer best practice and license pool Question 1: Will co-locating the License Master (LM) and Monitoring Console (MC) cause issues when forwarding interna... by Wohamed_wakkad Explorer in Deployment Architecture 06-12-2026 0 5	0	5
Splunk Migration: From ESXI to Hyper-V Hi,We want to migrate from the ESXI VM to the Hyper-V:Our Initial approach:Fresh OS + Splunk installations on Hyper-V... by 0xAli Path Finder in Deployment Architecture 06-12-2026 0 6	0	6
Migrate from vm to another Hi all,I need to migrate heavy forwarders, search head cluster and search head deployer, cluster manager, license ma... by martaBenedetti Path Finder in Deployment Architecture 06-04-2026 0 6	0	6
On Splunk 9.4.10, Forwarder Management page loading indefinitely when not connected to Internet Good afternoon,I have a problem on my Splunk instance v.9.4.10 where the "Forwarder Management" page is indefinitely ... by igall Loves-to-Learn in Deployment Architecture 06-01-2026 0 2	0	2
What is the recommended deployment architecture? We have two active-active deployment servers in place. Quite often, apps reach their destination in a week's delay. I... by spl_aficionado Path Finder in Deployment Architecture 05-22-2026 0 9	0	9
Co-locate the deployment server with other splunk HF Hi All,We have approximately 100 Splunk Universal Forwarders (UFs) installed at a remote site, and we're interested i... by VK18 Explorer in Deployment Architecture 05-22-2026 0 9	0	9
Splunk Search Head Cluster Upgrade I have a 2 search heads in a Splunk SH cluster in the dev environment. Recently, I upgraded Splunk from 9.3.8 to 9.4.... by himanshu2 Loves-to-Learn in Deployment Architecture 05-19-2026 0 2	0	2
How to Secure Sensitive Data Before AI Processing? As organizations increasingly adopt AI tools for automation, analytics, and decision-making, protecting sensitive dat... by romquestaai_gma New Member in Deployment Architecture 05-11-2026 0 2	0	2
Has anyone configured CM redundancy using load balancer ? Current setup - Indexers --> F5 VIP --> CM CM is seeing the requests are coming F5 VIP rather than actual source ip o... by thehow Loves-to-Learn in Deployment Architecture 05-05-2026 0 2	0	2
How can I move Cribl ingestion to Splunk safely? We are planning to decommission our Cribl environment and migrate all data ingestion directly back to Splunk. I am lo... by LovingSplunk Path Finder in Deployment Architecture 04-28-2026 0 3	0	3