Deployment Architecture

Deployment Architecture
Community Activity
chrmoriarty
I know this question has been asked before today... My company is researching Splunk, and we have a strict policy ...
by chrmoriarty New Member in Deployment Architecture 11-20-2018
0 4
0
4
chrmoriarty
Hello - earlier I asked if I would be sharing data with Splunk, which would take me out of compliance with my company...
by chrmoriarty New Member in Deployment Architecture 11-20-2018
0 1
0
1
arthurf
Hello, I'm monitoring a folder to index files and I search to run a script on the file once detected before the inde...
by arthurf Explorer in Deployment Architecture 11-20-2018
0 0
0
0
rickyhsu7
In my structure, receiver will predict something with the data if the forwarder gives some data to the receiver. Afte...
by rickyhsu7 Explorer in Deployment Architecture 11-20-2018
0 0
0
0
ghostdog920
I am setting up a new splunk environment and running into a few questions i am hoping i can get answers for. My envi...
by ghostdog920 Path Finder in Deployment Architecture 11-19-2018
0 1
0
1
schofiet
We're seeing an issue on our indexer cluster where ~25% of events are duplicated. The raw logs do not contain duplica...
by schofiet Explorer in Deployment Architecture 11-19-2018
0 5
0
5
cameronr0705
We have 3k+ servers comprised of Linux, Windows, Solaris, and AIX. We would like to place different customers in sepa...
by cameronr0705 New Member in Deployment Architecture 11-16-2018
0 3
0
3
daniel_splunk
One of my indexers crashed in a cluster environment and left a corrupted bucket. Search will return error when hittin...
by daniel_splunk Splunk Employee Splunk Employee in Deployment Architecture 11-16-2018
0 2
0
2
chioverheaddoor
DB Connect was working Tuesday night. I didnt install any apps or perform any maintainance on the host server. Wedn...
by chioverheaddoor Explorer in Deployment Architecture 11-15-2018
0 0
0
0
siva_cg
Hi All, Today, I have upgraded the Splunk version to 7.1.2 in my lab environment which contains 20 Universal forward...
by siva_cg Path Finder in Deployment Architecture 11-15-2018
0 5
0
5
a212830
Hi, Our Splunk system was down this morning, and we noticed that the issue was that lots of bundles were being gener...
by a212830 Champion in Deployment Architecture 11-14-2018
2 2
2
2
DavidHourani
Hello, I need help on understanding something. If I have a folder being monitored by a universal forwarder and I lo...
by DavidHourani Super Champion in Deployment Architecture 11-14-2018
0 16
0
16
davidmills
We have a log format which contains a JSON payload. When we attempt to parse using spath, anything after a certain c...
by davidmills Explorer in Deployment Architecture 11-13-2018
1 3
1
3
pgoonghang
I have a cluster master up and running, and was able to add a single search head. Now, when I login to splunkweb on t...
by pgoonghang New Member in Deployment Architecture 11-13-2018
0 2
0
2
dschmidt_cfi
Running Splunk v.7.0.2 in a distributed environment with 3 clustered indexers. Trying to restore frozen data to my st...
by dschmidt_cfi Path Finder in Deployment Architecture 11-13-2018
0 9
0
9
davidjohnbecket
We have in index cluster: two node index clustertwo sites (one index peer in each site) We are seeing an issue wher...
by davidjohnbecket Path Finder in Deployment Architecture 11-13-2018
0 0
0
0
goyalramit
Hi, I am getting various errors while trying to upload data into splunk enterprise. I have tried uninstalling and re...
by goyalramit New Member in Deployment Architecture 11-13-2018
0 0
0
0
sat94541
Issue: Cluster Master with multi-site, by mistake wrong retention file was replicated and for the entire indexer in s...
by sat94541 Communicator in Deployment Architecture 11-12-2018
0 2
0
2
sat94541
What happen is we were changining index cold volume..The change the size of warm db and force bucket to roll to cold ...
by sat94541 Communicator in Deployment Architecture 11-12-2018
0 2
0
2
davidmills
I have set... [default] TRUNCATE = 20000 ...in $SPLUNK_HOME/etc/system/local/props.conf for our search heads (a c...
by davidmills Explorer in Deployment Architecture 11-12-2018
0 3
0
3
ddrillic
The replication subject is a major one in the Splunk 7.1 Cluster Administration class. However, the instructor wasn't...
by ddrillic Ultra Champion in Deployment Architecture 11-12-2018
0 6
0
6
moizmmz
Hello, I am currently using Splunk sitting on a machine connected to public network. What I want to do, is, open th...
by moizmmz Path Finder in Deployment Architecture 11-10-2018
0 1
0
1
sarnathkj
I deleted the trusted.pem in /splunk/etc/auth/ directory. Is there a way i can recover it?
by sarnathkj Explorer in Deployment Architecture 11-09-2018
0 0
0
0
keishamtcs
Hi, I am required to restart Splunk service on deployment clients at mid night everyday . Selecting "Restart Splunk...
by keishamtcs Explorer in Deployment Architecture 11-08-2018
0 7
0
7
sylbaea
Hello, I have several critical UF/HF that providing equivalent service in a load-balanced topology. I would like to ...
by sylbaea Communicator in Deployment Architecture 11-08-2018
0 0
0
0
Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...