Deployment Architecture

Community Activity

Notable events to be stored in Splunk locally and also be sent to another platform Hi,Good day! Just wanted to check your insights or any reference that you can share.We have Clustered Multisite Splun... by jaracan Communicator in Deployment Architecture 08-27-2024 0 4	0	4
BundleDataProcessor - File length is greater than 260 Hi!We deployed 2 new servers on Linux and cteated from them SHcluster.Captain:dynamic_captain : 1elected_captain : We... by Gal123 Loves-to-Learn in Deployment Architecture 08-25-2024 0 2	0	2
Indexes.conf config stuck In Indexes.conf from the CM, I tried to set thawedHomePath to a volume, which I have since learned does not work.I se... by jessieb_83 Path Finder in Deployment Architecture 08-22-2024 0 2	0	2
Forwarding events to an indexer cluster using an AWS ELB Hey all, We have many different forwarders installed on different hosts and we are migrating to a cluster of indexers... by kdoonan Explorer in Deployment Architecture 08-22-2024 3 7	3	7
Remove missing/duplicate forwarders from forwarder managment This sounds like an "asked and answered" question, but my searches didn't come up with a satisfactory answer. How do... by gregplevak New Member in Deployment Architecture 08-21-2024 0 1	0	1
Search Head cluster : Multi-Cloud Search I've been out of touch with Core Splunk for sometime, so just checking if there are options for below requirementOrga... by koshyk Super Champion in Deployment Architecture 08-20-2024 0 6	0	6
The percentage of non high priority searches lagged (48%) over the last 24 hours is very high and exceeded the yellow th Hi all,How can this be fixed?Thanks for your help on this, by MarcinPiw Loves-to-Learn Lots in Deployment Architecture 08-19-2024 0 1	0	1
Expanding my splunk architecture Currently, I have a single Splunk server that is performing all the necessary functions. However, I would like to exp... by haleyh44 Path Finder in Deployment Architecture 08-15-2024 0 15	0	15
to provide the list of P1C alerts for JMET cluster from Splunk There is a request to provide the list of P1C alerts for JMET cluster from Splunkwe have provided the following quer... by Splunk-Star Loves-to-Learn Lots in Deployment Architecture 08-14-2024 0 1	0	1
New inputs.conf Settings Not Applied After Pushing Configurations from Deployment Server (Splunk 9.2.1) Hi Splunk community, I'm facing an issue with my Splunk deployment server, running on version 9.2.1 (splunk-9.2.1-788... by refahiati Explorer in Deployment Architecture 08-13-2024 0 1	0	1
app/launcher/home requires xml -- won't launch json dashboard The classic dashboard format was xml; the new Dashboard Studio format is json. Our app/launcher/home is failing to lo... by KirkA New Member in Deployment Architecture 08-13-2024 0 0	0	0
Splunk Heavy Forwarder vs Universal Forwarder for large splunk instance Hello Everyone, looking for a little guidance on our Splunk deployment for a system. Currently, we have a few diffe... by Twagner79 Explorer in Deployment Architecture 08-12-2024 0 6	0	6
Splunk bandwidth requirements Dear All,I would like to introduced the DR Site along with active log ingestion (SH cluster + Indexers cluster ).is t... by Nraj87 Explorer in Deployment Architecture 08-08-2024 0 1	0	1
Why this error on search head cluster after updating Splunk_TA_Windows? I recently updated Splunk_TA_Windows and am seeing this error on my search head cluster:[Indexers] Could not load loo... by TheBravoSierra Path Finder in Deployment Architecture 08-07-2024 0 4	0	4
Why does the Monitoring Console not update with new indexer information? I've replaced 2 or my 4 indexers in the cluster on an AWS deployment. The Indexer Cluster Status shows the right lis... by kairisrj Explorer in Deployment Architecture 08-07-2024 1 12	1	12
Can you still search logs on an indexer that is turned into a heavy forwarder We have a legacy all-in-one Splunk server. We have built out a new distributed environment that has an indexer cluste... by fredclown Builder in Deployment Architecture 08-07-2024 0 3	0	3
SplunkEnterpriseSecurity App on ClusterMaster Hi,While troubleshooting below error message: "The percentage of non high priority searches delayed (75%) over the la... by raiqb01 Engager in Deployment Architecture 08-06-2024 0 1	0	1
join query issue Hi allI am trying to fetch incident details from servicenow, but its showing duplicate values index=acn_lendlease_c... by pavithra Explorer in Deployment Architecture 08-01-2024 0 1	0	1
I want to design a disitributed splunk architecture and need to know system requirements for components Hi, I'm trying to design a distributed architecture of Splunk for my company, and I need to pitch the design to them.... by lostcauz3 Path Finder in Deployment Architecture 07-31-2024 0 5	0	5
How do i identify unneeded knowledge object I've been requested to identify unused knowledge objects. I'm honestly not sure on the best way to go about this requ... by Marko Explorer in Deployment Architecture 07-31-2024 0 3	0	3
How to deploy updates to inputs.conf, outputs.conf, and deploymentclient.conf files to the "C:\Program Files\Splunk\etc\system\local" directory? I have created an app (which includes updates for the inputs.conf, outputs.conf and deploymentclient.conf files), an ... by thomas_forbes Communicator in Deployment Architecture 07-29-2024 0 5	0	5
Why are deployment clients not showing up in deployment server? The configurations are perfect and the ping and telnet are working between the deployment server and the client but a... by Venkat_16 Contributor in Deployment Architecture 07-29-2024 0 8	0	8
Setting up a Splunk Dev Environment So i have three servers in this Splunk infrastructure, a SH, an Indexer, and a forwarder. I have installed the free 1... by Abass42 Communicator in Deployment Architecture 07-27-2024 0 8	0	8
Install problems (feature is not available) I am currently running Universal Forwarder 6.6.3 on a Windows 2012 R2 instance. I am attempting to upgrade to 7.1.1,... by jpkelly_2 New Member in Deployment Architecture 07-26-2024 0 5	0	5
distsearch.conf and the web interface when configuring a distributed search ... why when i create a new server on the web interface it asks for a username:... by hiddenkirby Contributor in Deployment Architecture 07-26-2024 0 3	0	3