Deployment Architecture

Community Activity

full removing search head clustering Hello Splunkers , Currentlly i am having three search heads in search head clustering , What i want is to remove eac... by kannu Communicator in Deployment Architecture 11-23-2018 0 2	0	2
Why could I not receive the alert email ? Hi All, I use Splunk Enterprise. I have set email setting like host through smtp.gmail.com:465 Besides, I can send e... by rickyhsu7 Explorer in Deployment Architecture 11-22-2018 0 2	0	2
Forwarders not forwarding data at real time We have a process that runs on a specific machine every day for 60 iteration for 5 mins between each iteration per da... by ppanchal Path Finder in Deployment Architecture 11-21-2018 0 0	0	0
How to configure a deployer for a search head cluster on an existing master node of an indexer cluster? Hi Splunk-Community, As I found out through the Splunk docs, it is possible to run a deployer for a search head clu... by horsefez Motivator in Deployment Architecture 11-21-2018 1 5	1	5
Is it possible to filter the based on metrics value on metric index? I'm trying to run mstats query for metric index to filter based on the metrics value. i.e, _value. I'm aware that spl... by shan_hcl Explorer in Deployment Architecture 11-21-2018 0 0	0	0
What changes to configuration files require a restart of Splunk? What changes to Splunk configuration files require a restart of Splunk to take effect? Is there a list or table some... by lguinn2 Legend in Deployment Architecture 11-21-2018 9 11	9	11
Add icon to a Splunk app running on Linux instance I have an app installed on Splunk running on a Linux machine and another copy of the same app installed on Splunk run... by sh254087 Communicator in Deployment Architecture 11-20-2018 1 1	1	1
How can I use Splunk so our company data is not shared with anyone? I know this question has been asked before today... My company is researching Splunk, and we have a strict policy ... by chrmoriarty New Member in Deployment Architecture 11-20-2018 0 4	0	4
Data Storage on Laptop Hello - earlier I asked if I would be sharing data with Splunk, which would take me out of compliance with my company... by chrmoriarty New Member in Deployment Architecture 11-20-2018 0 1	0	1
Run script at indexation Hello, I'm monitoring a folder to index files and I search to run a script on the file once detected before the inde... by arthurf Explorer in Deployment Architecture 11-20-2018 0 0	0	0
Could I give feedback to forwarder from receiver? In my structure, receiver will predict something with the data if the forwarder gives some data to the receiver. Afte... by rickyhsu7 Explorer in Deployment Architecture 11-20-2018 0 0	0	0
First Time Setup with Heavy Forwarder Help - Specific Palo Alto Question I am setting up a new splunk environment and running into a few questions i am hoping i can get answers for. My envi... by ghostdog920 Path Finder in Deployment Architecture 11-19-2018 0 1	0	1
What causes duplicate data in an indexer cluster? We're seeing an issue on our indexer cluster where ~25% of events are duplicated. The raw logs do not contain duplica... by schofiet Explorer in Deployment Architecture 11-19-2018 0 5	0	5
Linux TA app issue - different index based on hostname and OS We have 3k+ servers comprised of Linux, Windows, Solaris, and AIX. We would like to place different customers in sepa... by cameronr0705 New Member in Deployment Architecture 11-16-2018 0 3	0	3
How do I remove a corrupted bucket in an Indexer Cluster environment? One of my indexers crashed in a cluster environment and left a corrupted bucket. Search will return error when hittin... by daniel_splunk Splunk Employee in Deployment Architecture 11-16-2018 0 2	0	2
DB Connect v3 suddenly stopped working DB Connect was working Tuesday night. I didnt install any apps or perform any maintainance on the host server. Wedn... by chioverheaddoor Explorer in Deployment Architecture 11-15-2018 0 0	0	0
Deployment Server showing clients as not phoning home Hi All, Today, I have upgraded the Splunk version to 7.1.2 in my lab environment which contains 20 Universal forward... by siva_cg Path Finder in Deployment Architecture 11-15-2018 0 5	0	5
Can you help us with understand how Splunk manages bundles? Hi, Our Splunk system was down this morning, and we noticed that the issue was that lots of bundles were being gener... by a212830 Champion in Deployment Architecture 11-14-2018 2 2	2	2
Does Universal Forwarder connection Loss cause data loss ? Hello, I need help on understanding something. If I have a folder being monitored by a universal forwarder and I lo... by DavidHourani Super Champion in Deployment Architecture 11-14-2018 0 16	0	16
spath truncation We have a log format which contains a JSON payload. When we attempt to parse using spath, anything after a certain c... by davidmills Explorer in Deployment Architecture 11-13-2018 1 3	1	3
"ERROR ClusteringMgr - VerifyMultisiteConfig failed" when trying to join cluster I have a cluster master up and running, and was able to add a single search head. Now, when I login to splunkweb on t... by pgoonghang New Member in Deployment Architecture 11-13-2018 0 2	0	2
Why are my thawing frozen buckets not restoring as expected? Running Splunk v.7.0.2 in a distributed environment with 3 clustered indexers. Trying to restore frozen data to my st... by dschmidt_cfi Path Finder in Deployment Architecture 11-13-2018 0 9	0	9
Issues with rolling restart (index cluster) & idea to add additional index peers We have in index cluster: two node index clustertwo sites (one index peer in each site) We are seeing an issue wher... by davidjohnbecket Path Finder in Deployment Architecture 11-13-2018 0 0	0	0
('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)) Hi, I am getting various errors while trying to upload data into splunk enterprise. I have tried uninstalling and re... by goyalramit New Member in Deployment Architecture 11-13-2018 0 0	0	0
Multi-site cluster , wrong Restrictive retention caused data delete. Anyway to stop splunk from deleting rest of teh data. Issue: Cluster Master with multi-site, by mistake wrong retention file was replicated and for the entire indexer in s... by sat94541 Communicator in Deployment Architecture 11-12-2018 0 2	0	2