Deployment Architecture

Community Activity

Migration from Standalone to indexer cluster (2 indexers + 1 SH) Hi fellows, It's time to migrate our good old Standalone Splunk Enterprise to 'Small Enterprise deployment'.I read th... by norbertt911 Communicator in Deployment Architecture 09-30-2024 0 12	0	12
Universal Forwarder upgrade frequency best practices. Hi,I'm looking for advise how often should I upgrade Splunk Universal Forwarder - what is the best practice for this.... by PiotrAp Path Finder in Deployment Architecture 09-30-2024 0 8	0	8
Cannot get data Index in Datamodel Hi there, I was ingest new server to new index (Ubuntu with UF) Let say my index is index=ABC I want to connect it in... by zksvc Contributor in Deployment Architecture 09-29-2024 0 10	0	10
Universal Forwarder best setting in Linux Yesterday i was ingest new server in my Splunkin my case, in directory /opt/splunkforwarder/etc/system/local/inputs.c... by zksvc Contributor in Deployment Architecture 09-29-2024 0 10	0	10
The splunk service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. I have a cyber security finding that states "The splunk service accepts connections encrypted using SSL 2.0 and/or SS... by wardsd New Member in Deployment Architecture 09-28-2024 0 2	0	2
Scheduled Alert Hello, I am confused about the "Expires" thing when setting an alert. I have my alert scheduled every day and the exp... by Mondaya13 Explorer in Deployment Architecture 09-27-2024 0 2	0	2
CMMC Version 2.0 Hi Team is there any information of when Compliance Essentials will be updated to support CMMC version 2.0, from my u... by tajin_queen Engager in Deployment Architecture 09-20-2024 1 0	1	0
Ingest fortigate logs to splunk Hi All, I already configure ingestion log from fortigate using syslog , the log send using UDP by port 514. I also se... by dikaaditsa Loves-to-Learn Lots in Deployment Architecture 09-20-2024 0 10	0	10
Migrate Indexer Cluster to stand alone indexer Hi, we are decomisioning our splunk infra, our company was purchased and the new management want to free resources :(... by dieguiariel Path Finder in Deployment Architecture 09-19-2024 0 4	0	4
How to disable/restrict a certain url Hello,In my Splunk web service, we have the domain, for example: https://splunksh.com The problems is anyone can get ... by tungpx Explorer in Deployment Architecture 09-19-2024 0 2	0	2
Indexes and Server types I have about 100 servers. These are a mix of different Oracle servers, Databases, Web Apps Servers, Data Warehouse s... by texascj Path Finder in Deployment Architecture 09-18-2024 0 6	0	6
configuring Universal forwarder for splunk cluster I have indexer cluster setup with a load-balancer in front of it. I want the syslog to be ingested into the indexer... by Somesh Path Finder in Deployment Architecture 09-18-2024 0 2	0	2
HF and DS for DR As a Splunk newcomer, I need guidance on using Splunk effectively to send logs to a Disaster Recovery (DR) environmen... by Vnarunart Explorer in Deployment Architecture 09-16-2024 0 3	0	3
Use Cases downloaded from Splunk with .spl file extension Hello,I have downloaded all the Use Cases in ES app and now I want to open .spl file to look into these Use Cases but... by FAnalyst Engager in Deployment Architecture 09-14-2024 0 3	0	3
After Migrate single site to multisite Indexer cluster If facing issue after migrating single site to multisite indexer cluster. SF/RF not met after 5 days still fixup task... by Mitesh_Gajjar Explorer in Deployment Architecture 09-13-2024 0 2	0	2
Run saved searches on a single indexer Hello, A client went mad on how many saved searches they require and wont get rid of them. Due to this it is hammerin... by L_Petch Path Finder in Deployment Architecture 09-11-2024 0 2	0	2
License Server minimum Splunk docs show all deployment components needing a minimum of x64, 12 cores, 12GB, 2GHZMy question is for a dedicat... by kirk_in_porto Explorer in Deployment Architecture 09-10-2024 0 3	0	3
Dedicated search head with admin rights but not admin of indexer cluster. Hi,My team (Team1) has a cluster of indexers and a search head cluster. We want to add a dedicated a search head to T... by jlhamlet Path Finder in Deployment Architecture 09-10-2024 0 3	0	3
forwarded events and field extraction Hello Members, i have data coming from HF indexed in indexer and i can search it the problem at the details of event ... by KhalidAlharthi Explorer in Deployment Architecture 09-10-2024 0 14	0	14
parsing issues with FIREEYE hx end-point security Hello members i'm facing problems regarding parsing the event details on splunk i have forwarded the events from HF t... by KhalidAlharthi Explorer in Deployment Architecture 09-08-2024 0 3	0	3
oneshot events not in index --- ooops problem solved I'm trying to use oneshot on a Windows HF to test some data. Here is the command and the result: C:>"Program Files\... by reswob4 Builder in Deployment Architecture 09-07-2024 0 5	0	5
adding local port inside HF to accept data Hello Members, I have configured splunk HF to recieve data input as port 1531/udp i used command firewall-cmd --perm... by KhalidAlharthi Explorer in Deployment Architecture 09-06-2024 0 2	0	2
How to achieve The High availability and Disaster recovery architecture in Splunk distributed environment. Do we have any facility in the Splunk that we can achieve the High availability or Disaster recovery features in the ... by Gk7 Engager in Deployment Architecture 09-06-2024 0 6	0	6
splunk indexer: status: "pending", fully searchable: "no". How to fix? After updating a bucket replication policy and doing a rolling restart of cluster indexers, one of the indexers seems... by mitag Contributor in Deployment Architecture 09-05-2024 1 13	1	13
Stream forwarder only works when running as root I need to run Splunk Stream on some universal forwarders to capture data from a set of servers. The only way I've bee... by TheDWord Engager in Deployment Architecture 09-03-2024 0 0	0	0