Deployment Architecture

Community Activity

Why am I getting the following error between Eventgen and a Netapp Ontap entry?: "not well-formed (invalid token): line 1, column 6" I have installed Splunk 7.2 and Evengen 6.2.1 and I want to generate events for NetApp Ontap entry. I have run the fo... by freflex New Member in Deployment Architecture 10-03-2018 0 0	0	0
For splunk search 7.0.0. Getting Search process did not exit cleanly, exit_code=255, description="exited with code 255". its a distributed search head. Please find the below search.log information: 09-25-2018 06:17:18.345 INFO dispatchR... by Venkat_16 Contributor in Deployment Architecture 10-03-2018 0 4	0	4
How do I redirect logs from the default main index to a new index? We are trying to set up to log container logs into Splunk 6.6.3. We have set up an index and an application with an... by nls7010 Path Finder in Deployment Architecture 10-03-2018 0 4	0	4
Do you know what the meaning of the following warning is?: "Bucket is not on any other peer! Removing it." Hello there, We faced an issue with our Indexer Cluster and I am trying to understand what happened. I see these me... by D2SI Communicator in Deployment Architecture 10-03-2018 1 3	1	3
Why am I getting the following "needs splunkd to be up" error when applying a cluster command? I downloaded an app and placed it in the shcluster/apps folder in the deployer and ran the apply bundle command and I... by vrmandadi Builder in Deployment Architecture 10-01-2018 0 2	0	2
How do I fix this "Error rendering (Legacy) Clustered Single Value Map Visualization visualization" in leaflet Maps app? How do I fix this "Error rendering (Legacy) Clustered Single Value Map Visualization visualization"? i am getting th... by Nadhiyaa Path Finder in Deployment Architecture 10-01-2018 0 0	0	0
With Red Hat Enterprise Linux(RHEL) 7.5 and a Splunk Forwarder, what is the command to start the Splunk service? What is the command to start the Splunk service? Or better, what is the Splunk service name? Tried splunk and splun... by allenstg New Member in Deployment Architecture 09-29-2018 0 5	0	5
クライアント管理の方法について,クライアントのログオン、ログオフの情報収集について About client management method, about client logon and logoff information collection クライアント端末をSplunk 上で管理する方法を教えてください。バージョンはSplunk Enterprise 7.1.2となります。 agentなどをインストールする必要があるかと思いますが、どのようにインストールを行えばよ... by keisuke_kanamar New Member in Deployment Architecture 09-29-2018 0 3	0	3
Can you help me understand the documentation around the delta replication from a deployer to the search heads cluster? I'm not fully understanding the documentation around the delta replication from a deployer to the search heads(or clu... by danman06 Explorer in Deployment Architecture 09-28-2018 0 3	0	3
When trying to do a CSV data upload and create an index, how come no lines and events are found in the event summary? Hi I am trying to do a .csv file upload and create an index. I am afraid I can not upload the file due to lack of ka... by flopit Path Finder in Deployment Architecture 09-27-2018 0 0	0	0
How do I extend/increase the all buckets size in Splunk by Time period (Days)? Hi Everyone, I have gone through some Splunk documents about buckets. But most of the time I have seen that everyone... by saibal6 Path Finder in Deployment Architecture 09-26-2018 0 2	0	2
Top Unix processes as per CPU I am trying to build a dashboard for listing of 5 top unix processes by CPU by using macro Top_5_CPU_Processes_by_Hos... by bsaujla131984 Path Finder in Deployment Architecture 09-26-2018 0 0	0	0
Can you help me migrate from Windows running 6.2.3 to Centos 7 running Splunk 7.1.3? Like the title says, moving from an old Windows install to a Centos build. I have set up and tested the new build, b... by RobPatton New Member in Deployment Architecture 09-26-2018 0 0	0	0
Why is my custom command to parse user agents in request and response returning the following " Search Factory: Unknown search command 'uaparser'" error? We have created a new custom command to parse user agents in request and response. It works perfectly in my local ins... by adari1990 Engager in Deployment Architecture 09-26-2018 0 1	0	1
Internal Logs from Forwarders not stopped I am trying to stop the splunkd.log and metrics.log from Windows Universal Forwarders. Since it is a distributed env... by amulay26 Path Finder in Deployment Architecture 09-25-2018 0 3	0	3
After trying to add a new member to a search head cluster, why am I getting the following "Failed to proxy call to member" error? I am trying to add a new member to an existing cluster but it is showing the following error :"Failed to proxy call t... by manikanthkoti Explorer in Deployment Architecture 09-25-2018 0 1	0	1
How do you set up forwarding from Cisco's Firepower Event Streamer (eStreamer) to Splunk Cloud? I have set up a TCP connection from Splunk to Cisco's Firepower eStreamer. I am trying to figure out how to best forw... by Dijanad New Member in Deployment Architecture 09-25-2018 0 1	0	1
How do scheduled search works in a cluster? hi team, If i have created scheduled searches/jobs on one of our standalone Search Heads (Search Head "A") and after... by mallempatisreed Explorer in Deployment Architecture 09-24-2018 0 1	0	1
Has anyone successfully used a Heavy Forwarder to relay Universal Forwarder(s) connectivity to a Deployment Server? Has anyone successfully used a Heavy Forwarder to relay Universal Forwarder(s) connectivity to a Deployment Server? ... by Log_wrangler Builder in Deployment Architecture 09-24-2018 0 3	0	3
How do we deal with a new IP segment for our cluster? Good morning, It is required to change the entire ip segment of our cluster since the interfaces will be changed to ... by efaundez Path Finder in Deployment Architecture 09-24-2018 0 2	0	2
How to connect splunk to the internet via Proxy on Windows Hi there, I have a Splunk Server running on Windows and want to use the integrated App-Update-Checking. To accomplis... by dahirt Explorer in Deployment Architecture 09-23-2018 0 5	0	5
REST API trigger limits for search head Hey guys, What are the REST API trigger limits for search head per 1 minute e.g.? I'm gonna call my search head from... by highsplunker Contributor in Deployment Architecture 09-23-2018 0 1	0	1
Uncooked Data Containing hostname I am sending uncoooked data but the hostname the other end are seeing is the Heavy Forwarder. Is there anyway of se... by lukessi Path Finder in Deployment Architecture 09-21-2018 0 2	0	2
Is there a limitation on the amount of data an outlier can process? Is there a limitation on the amount of data an outlier can process? I have several examples processing around 3K row... by Jthreadgill Explorer in Deployment Architecture 09-21-2018 0 0	0	0
Only splunkd.logs for index=_internal is visible for my AWS UF server Hi, I have around 1k number of hosts setup in AWS containers where I don't have access to any forwarders. All my for... by rchittip Path Finder in Deployment Architecture 09-20-2018 0 0	0	0

Get Updates on the Splunk Community!

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience A dashboard is rarely just a dashboard. It might be the view an ...

Guided Onboarding with Auto-schema Is Now Generally Available

We are excited to announce the General Availability of Guided Onboarding with Auto-Schematization ...

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deployment Architecture

Why am I getting the following error between Eventgen and a Netapp Ontap entry?: "not well-formed (invalid token): line 1, column 6"

For splunk search 7.0.0. Getting Search process did not exit cleanly, exit_code=255, description="exited with code 255".

How do I redirect logs from the default main index to a new index?

Do you know what the meaning of the following warning is?: "Bucket is not on any other peer! Removing it."

Why am I getting the following "needs splunkd to be up" error when applying a cluster command?

How do I fix this "Error rendering (Legacy) Clustered Single Value Map Visualization visualization" in leaflet Maps app?

With Red Hat Enterprise Linux(RHEL) 7.5 and a Splunk Forwarder, what is the command to start the Splunk service?

クライアント管理の方法について,クライアントのログオン、ログオフの情報収集について About client management method, about client logon and logoff information collection

Can you help me understand the documentation around the delta replication from a deployer to the search heads cluster?

When trying to do a CSV data upload and create an index, how come no lines and events are found in the event summary?

How do I extend/increase the all buckets size in Splunk by Time period (Days)?

Top Unix processes as per CPU

Can you help me migrate from Windows running 6.2.3 to Centos 7 running Splunk 7.1.3?

Why is my custom command to parse user agents in request and response returning the following " Search Factory: Unknown search command 'uaparser'" error?

Internal Logs from Forwarders not stopped

After trying to add a new member to a search head cluster, why am I getting the following "Failed to proxy call to member" error?

How do you set up forwarding from Cisco's Firepower Event Streamer (eStreamer) to Splunk Cloud?

How do scheduled search works in a cluster?

Has anyone successfully used a Heavy Forwarder to relay Universal Forwarder(s) connectivity to a Deployment Server?

How do we deal with a new IP segment for our cluster?

How to connect splunk to the internet via Proxy on Windows

REST API trigger limits for search head

Uncooked Data Containing hostname

Is there a limitation on the amount of data an outlier can process?

Only splunkd.logs for index=_internal is visible for my AWS UF server

From Raw Data to Executive-Ready Stories, Faster

Guided Onboarding with Auto-schema Is Now Generally Available

ATTENTION: We’re Moving! (AGAIN!)

Cisco Enhanced Netflow Add-On Insanity

edge processor service account

Splunk Attack Range v4 Local Ubuntu

Active Directory Deployment Failure in Splunk Atta...

State of SIR in ServiceNow not capturing

Deployment Architecture

Join the Conversation