Deployment Architecture

Community Activity

Why is the search head unable to find a new index in cluster? Hi all, My current setup consists of 1 x Search Head 3 x Indexers 1 x Cluster Master 1 x DS 1 x Test Forwarder I c... by willso777 Engager in Deployment Architecture 08-16-2018 0 5	0	5
Server non availabiity in splunk Hi All, I need help with host availability ? I need a table to list the servers that are not sending data in select... by VI371887 Path Finder in Deployment Architecture 08-16-2018 0 7	0	7
Is there any way to distribute the local system files (conf) to search heads? I want to make changes to web.conf and distribute them. Any way to do it for search heads? Thanks. by agentsofshield Path Finder in Deployment Architecture 08-16-2018 0 1	0	1
Indexer Discovery on Heavy Forwarder Is it possible to enable indexerDiscovery on a Heavy Forwarder? I followed instructions here (http://docs.splunk.com/... by kevingunn New Member in Deployment Architecture 08-15-2018 0 0	0	0
deployment-server socket timeout Hi version 6.11 , added over 90 hosts in the Forwarder Management in server class. getting error on the splunk web gu... by tlow Explorer in Deployment Architecture 08-15-2018 3 9	3	9
Can you forward specific indexed data from one server to another? Hello, Here is my scenario server: Splunk_A has index_a index_b and index_c Splunk_B has Index_d index_e and index_... by michel_wolf Path Finder in Deployment Architecture 08-15-2018 0 3	0	3
Why is the new index not searchable? Hi everyone, I'm new to Splunk and this is the first Index I created, so hopefully this Question ain't to nooby  T... by AlteUnke New Member in Deployment Architecture 08-14-2018 0 9	0	9
How to run scripts in Search Head Cluster on an alive node? Hi all, We have some scripts for lookup filling via splunk lookup rest api link text Also we have search head cluste... by gots Path Finder in Deployment Architecture 08-11-2018 0 2	0	2
Replication Factor with N+1 indexer Hello, I would like to know what was the workflow of the current situation. We have setup the replication factor nu... by anthonypradal New Member in Deployment Architecture 08-09-2018 0 1	0	1
Changing sslPassword in server.conf I'm trying to setup an index and searchhead cluster and want to use SSL, however, when I modify the sslPassword to us... by kevingunn New Member in Deployment Architecture 08-09-2018 0 3	0	3
OSSEC server not seeing/reporting file changes in Splunk I've configured the agent on my machine to monitor file changes for a specific folder and validated that Splunk's OSS... by dhaertel Path Finder in Deployment Architecture 08-08-2018 0 0	0	0
Why in a 4 site Search Head Cluster captain is getting elected automatically? Hi Forum, I'm integrating a streched SHC running in 4 sites. Each site have 1 SHC Member. When booting the SHC up th... by schose Builder in Deployment Architecture 08-08-2018 0 1	0	1
Why am I unable to update splunk cloud universal forwarder settings on Linux? I ran into a problem while putting together an Ansible playbook for deploying forwarder config. The initial deploymen... by hifimarko Engager in Deployment Architecture 08-07-2018 0 1	0	1
Splunk 6.3.0 crashes on clustered indexers when some indexes are set to read-only I deprecated certain indexes on my indexer cluster and wanted to set them to read-only (using isReadOnly = true) to a... by frankwayne Path Finder in Deployment Architecture 08-06-2018 2 3	2	3
How to migrate an index from a single instance to a clustered index? hello everyone I have a fortinet index that I would like to migrate to a 2 instance cluster ( one is having the data... by ranjitbrhm1 Communicator in Deployment Architecture 08-05-2018 0 7	0	7
Index Cluster - Search Factro and Replication Factor NOt Met - Error “Cannot replicate as bucket hasn’t rolled yet.” I have Index cluster with 3 Nodes and intermittently I see that ‘Search Factor” and “Replication Factor” not met. Whe... by sat94541 Communicator in Deployment Architecture 08-03-2018 0 4	0	4
Why all indexes are not available to select from "Available search indexes" during role creation? Splunk License : EnterpriseSplunk version : 6.4.0Deployment Model : Search head cluster, indexer cluster We are not ... by renjith_nair Legend in Deployment Architecture 08-02-2018 0 8	0	8
Cannot connect new splunk indexer to license master, getting error:Splunkd daemon is not responding: ('The read operation timed out',) I created two new splunk instances that I am trying to set as slaves to a license master. I add the https;//x.x.x.x:... by Log_wrangler Builder in Deployment Architecture 08-01-2018 0 4	0	4
Search had Cluster Error regarding outdated baseline op id I am getting this below error in my search head ERROR ConfReplicationThread - Error pushing configurations to captai... by vrmandadi Builder in Deployment Architecture 08-01-2018 2 0	2	0
What are the steps to remove data from an indexer cluster? Hi, I am new to Splunk, could you please help? I have a Splunk cluster - 1 Master(also the license master), 3 node ... by neltonk Path Finder in Deployment Architecture 07-31-2018 0 2	0	2
Is there a way to periodically restart Splunk? I need to restart splunk (or reload_ds) every Monday at 7:00AM, as new alerts and dashboards are being made in the fi... by hunterpj Path Finder in Deployment Architecture 07-31-2018 0 8	0	8
what happens to "\|delete"d events when a bucket is thawed? I have buckets with hidden (deleted) events that are frozen. I want to thaw these buckets. Will I need to re-delete t... by w199284 Explorer in Deployment Architecture 07-31-2018 0 2	0	2
Best practise when working with Clustered Endpoints I have a situation where I need to collect logs from an application that sits on clustered servers with a drive that ... by Kozanic Path Finder in Deployment Architecture 07-31-2018 0 3	0	3
Using cluster command and showing the unique contents of each cluster - How? I have a field in my events that can vary ever so subtly named "Serial". I am using the cluster command to combine th... by thisissplunk Builder in Deployment Architecture 07-31-2018 0 4	0	4
How to migrate Single distributed search head to Search Head cluster with 3 members? Hi All, We are planning to migrate Single distributed search head to Search Head cluster with 3 members and would li... by siva_cg Path Finder in Deployment Architecture 07-31-2018 0 2	0	2