Deployment Architecture

Community Activity

Is there an elegant way to keep configs synchronized between two search head clusters? Since the recommended best practice is for ES to run on its own cluster, I have several ES customers that run both an... by responsys_cm Builder in Deployment Architecture 07-28-2018 0 2	0	2
Can we override the guessed date for events that have no datestamp ? Duplicate of : How to make Splunk guess the correct date if only time is given? Splunk indexes times in our source an... by pclewis Explorer in Deployment Architecture 07-27-2018 0 1	0	1
My splunk instance stop responding I have been running splunk on a server for sometime now and last week it stops responding. I don't know what could be... by tamduong16 Contributor in Deployment Architecture 07-26-2018 0 16	0	16
Getting error on search head regarding replication Search peer stmsplidxc001.xxx.com has the following message: Indexer Clustering: Too many bucket replication errors t... by vrmandadi Builder in Deployment Architecture 07-26-2018 0 9	0	9
restartSplunkd doesn't restart Splunkd Hi, I am deploying apps from deployment server. Server classes having restartSplunkd=1 gets to stop when I deploy new... by akadoya Explorer in Deployment Architecture 07-26-2018 1 5	1	5
I am trying to delete events but still i can able to see those events? I am trying to delete events but the events not getting deleted i can see those events. Below command i am use to del... by pha New Member in Deployment Architecture 07-25-2018 0 4	0	4
Are Data model acceleration searches distributed across Search head cluster ? Hi, I have search head cluster with 3 search heads. I am trying to accelerate a data model. According to data model ... by veeraras Engager in Deployment Architecture 07-25-2018 0 1	0	1
HF all queues 100% Hello Everyone. Previous to muy question, a litle context first: SOME INPUTS / UF ---> Heavy fowarder ---> VPN TUNN... by lightech1 Path Finder in Deployment Architecture 07-25-2018 1 10	1	10
How to setup local access on a search-head that uses LDAP Hi, We have a single search-head that uses LDAP for most users. However, I have a requirement to enable local accou... by a212830 Champion in Deployment Architecture 07-24-2018 0 3	0	3
How to monitor cpu utlization from linux and unix ? In my scenario I have to consolidated cpu utlization of all application in one query.But i cannot get proper output b... by karthi2809 Builder in Deployment Architecture 07-24-2018 0 1	0	1
Why am I getting an error when starting UBA? Error when starting UBA using: /opt/caspida/bin/Caspida start Starting Topologies Exception in thread "main" org.... by christopherr_sp Splunk Employee in Deployment Architecture 07-24-2018 0 1	0	1
How to get the Splunk forwarder 7.0.1 PGP key? Does anyone has link for the above mentioned PGP key,I am installing splunk forwarder and I was getting an error rega... by vrmandadi Builder in Deployment Architecture 07-23-2018 0 3	0	3
Why isn't calendar_heatmap_app being deployed to the SHs? I deployed the out-of-the-box calendar_heatmap_app from the deployer server to the three search heads. They haven't r... by ddrillic Ultra Champion in Deployment Architecture 07-23-2018 0 6	0	6
How to send data to securonix servers from splunk Hi All, Scenario: I have 10000 Universal Forwarder deployed in windows servers and those servers contains windows e... by sbbadri Motivator in Deployment Architecture 07-23-2018 0 0	0	0
Migrating Data I have 4 indexers in a cluster and need to get the data in the cold volumes migrated to a new set of storage. What w... by Kendo213 Communicator in Deployment Architecture 07-23-2018 0 3	0	3
ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf. 07-18-2018 21:20:40.725 +0000 WARN X509Verify - X509 certificate (O=SplunkUser,CN=SplunkServerDefaultCert) should no... by ahmemohs03 Explorer in Deployment Architecture 07-21-2018 0 29	0	29
sourcetype override on indexer cluster Hi guys, We have a clustered 6.5.3 deployment and following this doc to re-assign a new sourcetype to squid access lo... by eddiet Explorer in Deployment Architecture 07-21-2018 0 6	0	6
Is there any way to re-create the TSIDX files reduced by enabletsidxredctuon? Is there any way to re-create the TSIDX files by journal.gz? Previously we had enabled the walls: enabletsidxredctuo... by justodaniel Path Finder in Deployment Architecture 07-20-2018 2 4	2	4
Can i use Splunk enterprises as uinversal forwarder? Can i use Splunk enterprises as uinversal forwarder? if yes please send me documentation Thanks. by ahmemohs03 Explorer in Deployment Architecture 07-20-2018 0 8	0	8
Deployment Server - when app is redeployed, what is overwritten so i just want to clarify somethings: app deployed: test_app directories: Default, Local Default: inputs.conf Local:... by robf Path Finder in Deployment Architecture 07-20-2018 3 9	3	9
password file wont symbolic link. I have an odd problem with the local password file. I have a volume that is mounted to my unix server ( lets say it i... by psenger New Member in Deployment Architecture 07-20-2018 0 0	0	0
i have configured s3 bucket logs on splunk heavyforwarder through splunk add-on for AWS ,but all s3 bucket logs are going to splunk default index _internal. Can someone tell me why all S3 logs are going to _internal. I have configured S3 bucket logs with input Generic S3 on splunk heavyforwarder through splunk add-on for AWS and giv... by ismailmohammed New Member in Deployment Architecture 07-19-2018 0 0	0	0
How do I stop duplicate entries from PM2 logs from being indexed in Splunk? We utilize splunk to forward log files written out by PM2 (a node.js process manager) to our Splunk indexers. PM2 ha... by Carpesimia New Member in Deployment Architecture 07-18-2018 0 6	0	6
Splunk weburl not coming up. after configuring universal forwarder I had installed splunk 7.1.1 on Linux machine and started with id/passwd, it was coming up, then I installed splunk ... by ahmemohs03 Explorer in Deployment Architecture 07-18-2018 0 4	0	4
Deployment Server unable to deploy with HOMEPATH error Please assist in resolving the HOMEPATH error during app deployment attempt below: C:\Program Files\Splunk\bin>splun... by landen99 Motivator in Deployment Architecture 07-18-2018 1 4	1	4