Deployment Architecture

Community Activity

Use Cases downloaded from Splunk with .spl file extension Hello,I have downloaded all the Use Cases in ES app and now I want to open .spl file to look into these Use Cases but... by FAnalyst Engager in Deployment Architecture 09-14-2024 0 3	0	3
After Migrate single site to multisite Indexer cluster If facing issue after migrating single site to multisite indexer cluster. SF/RF not met after 5 days still fixup task... by Mitesh_Gajjar Explorer in Deployment Architecture 09-13-2024 0 2	0	2
Run saved searches on a single indexer Hello, A client went mad on how many saved searches they require and wont get rid of them. Due to this it is hammerin... by L_Petch Path Finder in Deployment Architecture 09-11-2024 0 2	0	2
License Server minimum Splunk docs show all deployment components needing a minimum of x64, 12 cores, 12GB, 2GHZMy question is for a dedicat... by kirk_in_porto Explorer in Deployment Architecture 09-10-2024 0 3	0	3
Dedicated search head with admin rights but not admin of indexer cluster. Hi,My team (Team1) has a cluster of indexers and a search head cluster. We want to add a dedicated a search head to T... by jlhamlet Path Finder in Deployment Architecture 09-10-2024 0 3	0	3
forwarded events and field extraction Hello Members, i have data coming from HF indexed in indexer and i can search it the problem at the details of event ... by KhalidAlharthi Explorer in Deployment Architecture 09-10-2024 0 14	0	14
parsing issues with FIREEYE hx end-point security Hello members i'm facing problems regarding parsing the event details on splunk i have forwarded the events from HF t... by KhalidAlharthi Explorer in Deployment Architecture 09-08-2024 0 3	0	3
oneshot events not in index --- ooops problem solved I'm trying to use oneshot on a Windows HF to test some data. Here is the command and the result: C:>"Program Files\... by reswob4 Builder in Deployment Architecture 09-07-2024 0 5	0	5
adding local port inside HF to accept data Hello Members, I have configured splunk HF to recieve data input as port 1531/udp i used command firewall-cmd --perm... by KhalidAlharthi Explorer in Deployment Architecture 09-06-2024 0 2	0	2
How to achieve The High availability and Disaster recovery architecture in Splunk distributed environment. Do we have any facility in the Splunk that we can achieve the High availability or Disaster recovery features in the ... by Gk7 Engager in Deployment Architecture 09-06-2024 0 6	0	6
splunk indexer: status: "pending", fully searchable: "no". How to fix? After updating a bucket replication policy and doing a rolling restart of cluster indexers, one of the indexers seems... by mitag Contributor in Deployment Architecture 09-05-2024 1 13	1	13
Stream forwarder only works when running as root I need to run Splunk Stream on some universal forwarders to capture data from a set of servers. The only way I've bee... by TheDWord Engager in Deployment Architecture 09-03-2024 0 0	0	0
Clarification on Splunk App DSDL max_inputs limit Hi experts,I am in early experiment journey with Splunk App for DSDL (aka DLTK) to pull in some events into Jupyterno... by MCW Explorer in Deployment Architecture 09-03-2024 1 1	1	1
index problem search the index is appearing inside the indexer cluster dashboard inside cluster master but when i try to search it using S... by KhalidAlharthi Explorer in Deployment Architecture 09-02-2024 0 2	0	2
Deployment client phoning to Management console instead of HF acting as DS I have a deployment, where 2 HF's are acting as DS. and they are both connected to MC for licensing at port 8089. In ... by Nawab Communicator in Deployment Architecture 09-02-2024 0 6	0	6
index creation from HF Hello members, I have clustered environment and i create index on HF and data inputs for receive syslog, I create the... by KhalidAlharthi Explorer in Deployment Architecture 09-02-2024 0 5	0	5
Search Cluster Overwriting etc/system/local/inputs.conf Situation.Search Cluster - 9.2.25 nodes running Enterprise Security version 7.3.2I'm in the process of adding 5 new n... by gazoscreek Path Finder in Deployment Architecture 08-29-2024 0 0	0	0
SAML issue "Data could not be written: /nobody/system/authentication/userToRoleMap_SAML:" Good afternoon everyone! Helping a client setup Splunk SAML for the first time. We have confirmed that the SAML IDP ... by jcspigler2010 Path Finder in Deployment Architecture 08-28-2024 0 3	0	3
Recommendations for OS partitions, mount points and RAID configuration for linux servers planning to deploy a splunk architecture with one SH and indexer cluster with 100GB/day data ingestion. Are there any... by amruthamkumar Observer in Deployment Architecture 08-27-2024 0 4	0	4
What it takes to replace SAS with Splunk on IBM Z Performance and Capacity Analytics We have a customer who does get IT mainframe insights today via CA SAS/MICS, a costly platform. They are seeking a so... by Agnaldo_S New Member in Deployment Architecture 08-27-2024 0 0	0	0
Notable events to be stored in Splunk locally and also be sent to another platform Hi,Good day! Just wanted to check your insights or any reference that you can share.We have Clustered Multisite Splun... by jaracan Communicator in Deployment Architecture 08-27-2024 0 4	0	4
BundleDataProcessor - File length is greater than 260 Hi!We deployed 2 new servers on Linux and cteated from them SHcluster.Captain:dynamic_captain : 1elected_captain : We... by Gal123 Loves-to-Learn in Deployment Architecture 08-25-2024 0 2	0	2
Indexes.conf config stuck In Indexes.conf from the CM, I tried to set thawedHomePath to a volume, which I have since learned does not work.I se... by jessieb_83 Path Finder in Deployment Architecture 08-22-2024 0 2	0	2
Forwarding events to an indexer cluster using an AWS ELB Hey all, We have many different forwarders installed on different hosts and we are migrating to a cluster of indexers... by kdoonan Explorer in Deployment Architecture 08-22-2024 3 7	3	7
Remove missing/duplicate forwarders from forwarder managment This sounds like an "asked and answered" question, but my searches didn't come up with a satisfactory answer. How do... by gregplevak New Member in Deployment Architecture 08-21-2024 0 1	0	1