Deployment Architecture

Deployment Architecture
Community Activity
yin_guan
Hello evereone I encountered an issue, as shown in the image. I can see two machines in the MC's forwarder dashboard,...
by yin_guan Explorer in Deployment Architecture 12-31-2024
0 8
0
8
BRFZ
Hello Splunk Community,I am working on the configuration of a distributed Splunk deployment, and I need clarification...
by BRFZ Communicator in Deployment Architecture 12-24-2024
0 1
0
1
zksvc
Hi Everyone, I was create my own lab for learning to configure best practice for Windows. Then i create 1 Windows VM ...
by zksvc Contributor in Deployment Architecture 12-23-2024
0 6
0
6
RAVISHANKAR
Hello, I would like send two different index data one to indexer and other to Intermediate forwarder.How the configur...
by RAVISHANKAR Explorer in Deployment Architecture 12-18-2024
0 1
0
1
SteveBowser
Everytime we have to force replication on the SH nodes of a SH Cluster, the inputs.conf replicates and overwrites the...
by SteveBowser Explorer in Deployment Architecture 12-18-2024
0 6
0
6
danielbb
I'm under the impression that HEC ingestion directly to the indexers is supported natively on cloud. I wonder whether...
by danielbb Motivator in Deployment Architecture 12-18-2024
0 1
0
1
Nawab
I have a SHC of 3 search heads. I changed some fields in data model of 1 sh. it is replicated on 2nd SH, but 3rd SH d...
by Nawab Communicator in Deployment Architecture 12-17-2024
0 10
0
10
mike1002
I am developing a splunk setup using docker image and Podman.  I am trying to setup 2 indexers along with an indexer ...
by mike1002 Engager in Deployment Architecture 12-17-2024
0 2
0
2
danielbb
On Splunk cloud, we can receive HEC ingestion directly to the cloud whereas on-prem we install distinct subclusters f...
by danielbb Motivator in Deployment Architecture 12-16-2024
0 9
0
9
dorHerbesman
i have a problem with the mention warning on my search head:(attached photo)dorHerbesman_0-1733928036973.pngi tried f...
by dorHerbesman Path Finder in Deployment Architecture 12-16-2024
0 4
0
4
hazem
I have configured Splunk with SAML (ADFS) but We are facing an issue during logout, with the following error message:...
by hazem Path Finder in Deployment Architecture 12-15-2024
0 1
0
1
Vikashnat90
Hi teamI'm trying to attach multiline config for all the pods in a namespace. Is there a way to achieve that? Adding ...
by Vikashnat90 New Member in Deployment Architecture 12-11-2024
0 1
0
1
jefffredericks
I've set up a dev 9.2 Splunk environment. And I'm trying to use a self-signed cert to secure forwarding. But every ti...
by jefffredericks New Member in Deployment Architecture 12-10-2024
0 1
0
1
AliMaher
Hello,   I have a Heavy Forwarder, and it was configured just to forward not index: [indexAndForward] index = false ...
by AliMaher Path Finder in Deployment Architecture 12-09-2024
0 3
0
3
inventsekar
Hi There,hope u r doing good, thanks for reading. 1) A fresh install of Splunk Enterprise 9.3.2 showing this security...
by SplunkTrust SplunkTrust in Deployment Architecture 12-06-2024
0 5
0
5
masakazu
https://docs.splunk.com/Documentation/ES/7.3.2/Install/InstallEnterpriseSecurityI installed Splunk Enterprise Securit...
by masakazu Explorer in Deployment Architecture 12-05-2024
0 4
0
4
HarishSamudrala
We have new SH node which we are trying to add to the Search head cluster,  updated the configs in shcluster config a...
by HarishSamudrala Loves-to-Learn Lots in Deployment Architecture 12-05-2024
0 2
0
2
vasanthboj
Dear Community members,It would be helpful if someone assist me with relevant document of deployment of Splunk enterp...
by vasanthboj New Member in Deployment Architecture 12-05-2024
0 3
0
3
PolarBear01
Hi folks,I'm having a hard time picking the right architecture for setting up a solution to gain high availability of...
by PolarBear01 Engager in Deployment Architecture 12-03-2024
0 2
0
2
JoshuaJJ
I have read other forums and posts, but it did not help with my issue. I am getting the typical Error while creating ...
by JoshuaJJ Path Finder in Deployment Architecture 12-03-2024
0 2
0
2
alec_stan
Good day Splunkers,We have two site/DCs, where one is production and the other a standby DR. In our current architect...
by alec_stan Explorer in Deployment Architecture 12-02-2024
0 5
0
5
danielbb
We are building a small Splunk installation in Azure and I'm not sure what the architecture should look like. The cli...
by danielbb Motivator in Deployment Architecture 11-30-2024
0 2
0
2
sosusa
Can Splunk SmartStore enabled with single site Indexer clustering which is spanning across two AWS regions?  Ex: One ...
by sosusa Engager in Deployment Architecture 11-30-2024
0 1
0
1
Codyy_Fast
Hello Splunk Community,   i monitor the audit.log on RHEL8. As soon as I generate a specific log entry locally, I can...
by Codyy_Fast Explorer in Deployment Architecture 11-27-2024
0 2
0
2
AliMaher
Hello Splunker,I hope you all are doing well. I have tried to deploy the Windows-TA Add-On over my environment [Searc...
by AliMaher Path Finder in Deployment Architecture 11-25-2024
0 5
0
5
Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...