Deployment Architecture

Community Activity

Copy index I'm looking for a clean way to copy an index or duplicate a data stream withouth having to index it twice. We have a... by splunkuzleuven Loves-to-Learn Lots in Deployment Architecture 02-26-2019 0 3	0	3
Is it possible to use SH-Deployer to Push User (Local) App? Basically what I wish to do is very simple, I want to clone 70+ alerts (entire savedsearches.conf). I maybe naive but... by morethanyell Builder in Deployment Architecture 02-26-2019 0 3	0	3
Error when installing splunkforwarde in Linux SUSE hello, when executing the command "zypper in ...." it gives me the following error: 'tmpRPMcache:splunkforwarder=0:7.... by akilesbailo16 New Member in Deployment Architecture 02-24-2019 0 10	0	10
How to backup my indexer cluster data? Hello Splunk Gurus, I've come up with a plan to backup my Splunk v6.6.1 indexes that I'd like to be reviewed. I don... by gedworksplunk Engager in Deployment Architecture 02-23-2019 0 3	0	3
Can you configure a Universal Forwarder output to send to two separate Heavy Forwarders? I need to send two copies of events to two different HFs (not load-balanced). I want to use a UF on a server to send... by Log_wrangler Builder in Deployment Architecture 02-22-2019 1 1	1	1
In my Search Head Cluster, why does "show shcluster-status" show captain, but not the members' information? After a recent bundle push from deployer to our search head cluster (SHC) members running Splunk Enterprise version 7... by scheng_splunk Splunk Employee in Deployment Architecture 02-21-2019 2 1	2	1
Where should we upload a file to index the data in an indexer cluster? We are using clustered environment with multiple indexers and single Search head. I want to upload a file which needs... by rangineniarunku Explorer in Deployment Architecture 02-21-2019 0 4	0	4
How to have HA for syslog inputs Hi. I was wondering. In a 2 UF, 2 Idexer setup, where UF config looks like this: [tcpout:SplunkIndexerGroup1] ser... by ultima Explorer in Deployment Architecture 02-20-2019 1 9	1	9
How to find out why Splunk is crashing with error "Crashing thread: TcpChannelThread"? Splunk is crashing, related possibly to DMA (data model acceleration). Having an issue with one of my clustered index... by jcspigler2010 Path Finder in Deployment Architecture 02-19-2019 2 1	2	1
How can you set Splunk to restart automatically when it goes down? Hello Splunkers, I need your help once again. Is there a way to restart Splunk automatically when it goes down? Un... by julian0125 Explorer in Deployment Architecture 02-19-2019 0 1	0	1
How to build a dataset far back in time with incremental job process Hi, I admit, it sounds like a standard search procedure, but I save aggregated data in a csv file. At the same time,... by steinroardahl Observer in Deployment Architecture 02-18-2019 0 0	0	0
Splunk Universal Forwarder 7.x setup ended prematurely on Windows Server 2012 R2 Datacenter edition Hi everyone, I've read lots of articles for that issue, but I can't find any solutions. Here is the premature splu... by kutlusensoy New Member in Deployment Architecture 02-17-2019 0 1	0	1
Last command and kernel update Hi, need your thoughts and help, Scenario: someone rebooted several servers and updated the kernel from one version ... by dbashyam Explorer in Deployment Architecture 02-16-2019 0 1	0	1
Does anyone know why /opt/splunk/var/run/splunk/lookup_tmp would fill up to 65GB on a search head? Does anyone know why /opt/splunk/var/run/splunk/lookup_tmp would fill up to 65GB on a search head? How would I clean... by tkw03 Communicator in Deployment Architecture 02-15-2019 0 6	0	6
Send only few events Hello Splunk Support, we have the following problem: - We must send a log file to different receiver: -- a Splunk s... by andreas_linden New Member in Deployment Architecture 02-15-2019 0 1	0	1
Can Splunk deployment server install sysmon on endpoints? Hi, I'd like to know if the Splunk deployment server can install sysmon on the endpoints. Does Splunk deployment s... by y2kbcm Explorer in Deployment Architecture 02-14-2019 0 1	0	1
Splunk SH Cluster - KV store cannot initiate set Hello, Im running a 3-node SH cluster + deployer (running splunk 7.1 on Centos 7) Cluster is up and Captain is SH1, ... by perfecto25 Path Finder in Deployment Architecture 02-14-2019 0 1	0	1
How to troubleshoot why a Universal Forwarder is not sending data to the Deployment Server? Hi all, I did read and try numerous if not all the subject similar to mine. I installed a Deployment Server on my Spl... by stephanedeck Explorer in Deployment Architecture 02-14-2019 0 7	0	7
My searchhead is slow since I update from 6 to 7.2.3 Hello, since I update my Splunk search head from 6 to 7.2.3, the display of the dashboards are very slow. In fact, a... by Alaza Explorer in Deployment Architecture 02-14-2019 0 5	0	5
integration of onpremise data with splunk on azure cloud environment How can I integrate on-premise Splunk data with splunk on azure cloud.I just wanted High level view like if I can ge... by ips_mandar Builder in Deployment Architecture 02-14-2019 0 5	0	5
search head cluster apps Hi, We use the deployer to distribute configs to the search head cluster. I want to add configs to the search head... by nawazns5038 Builder in Deployment Architecture 02-13-2019 0 3	0	3
_internal index not rolling from cold to frozen/deleted We have an issue where one of four indexers has filled itself with data in the _internal index. The two possible solu... by dss_orba New Member in Deployment Architecture 02-13-2019 0 0	0	0
Migrate from single-site indexer cluster to multi-site Hi guys. I had a single-site indexer cluster with replication_factor 3. Migrated to multisite cluster with parameter... by GenRockeR Explorer in Deployment Architecture 02-13-2019 0 5	0	5
Access to directories I have a directory accessible through UNC path. As a normal domain user, I have read access to that directory and I c... by mdzmuran Observer in Deployment Architecture 02-13-2019 0 2	0	2
Changing the server hostname has impact in splunk environment? Hi everyone, I just want to know if is there some impact changing the hostname of a linux machine. (Only the hostnam... by josephliion Explorer in Deployment Architecture 02-12-2019 0 2	0	2