Deployment Architecture

Community Activity

Not getting data from sample files on search head /forwarder to index cluster I am new to trying to set up a dev environment with 1 deployment server, 1 search head/forwarder 1 master cluster, 2... by greatdane New Member in Deployment Architecture 07-02-2018 0 3	0	3
Configure a new default index on universal forwarder I'm currently using a Universal forwarder to forward log data out to a Splunk cloud deployment from internal forwarde... by robinpilch New Member in Deployment Architecture 07-02-2018 0 1	0	1
splunk db connect - google bigquery has anyone created the connection between the google bigquery and splunk and if so what did you use in your types con... by ryanbamford Engager in Deployment Architecture 07-02-2018 8 0	8	0
why my indexer is not added into cluster ? Hello everyone I restarted a indexer IDX1 which is already in a cluster . So after restarting IDX1 i see this error ... by ramarcsight Explorer in Deployment Architecture 07-01-2018 0 4	0	4
Splunk universal forwarder parsing Can we parse a log using Splunk universal forwarder ? by vj5 New Member in Deployment Architecture 06-30-2018 0 2	0	2
Splunk Install on Ubuntu 10.4 Hi! I am new to Splunk. I just download the Splunk 4.1.4 tar file and untar on the host, What is the next step to con... by chennai Explorer in Deployment Architecture 06-29-2018 1 12	1	12
Mysterious Illogical Error - Trying to Forward - Parameter name: Path does not exist. Hello Team, I am trying to do a simple thing. I am trying to forward a log file to my remote Splunk indexer. I am us... by rogue_carrot Communicator in Deployment Architecture 06-28-2018 0 5	0	5
Splunk process killed by OS [out of memory] in Search head Hi, Today morning 2 search heads out of 3 from cluster went down. When i checked it killed by OS with message 'out of... by Yod_ssoni Explorer in Deployment Architecture 06-28-2018 0 5	0	5
Is this a known issue that splunk-optimize.exe on windows is faulting? Is this a known issue? Using Splunk Enterprise 7.0.2 on Windows Server 2012 R2. Faulting application name: splunk-op... by simpkins1958 Contributor in Deployment Architecture 06-28-2018 1 4	1	4
Unable to see old data in index after move it's location on the filesystem I'm working with a Splunk Enterprise 6.4.1 setup that has a index cluster spread over three Windows nodes. Typically ... by marrette Path Finder in Deployment Architecture 06-27-2018 0 0	0	0
Using Splunk deployment server to deploy apps to index master I would like to know if it is possible to use the splunk deployment server to manage index apps (.../etc/master-apps)... by brent_weaver Builder in Deployment Architecture 06-27-2018 0 12	0	12
What does status=delegated_remote OR status=delegated_remote_completion mean in the scheduler log? If looking at scheduler log from a single search head in the search head cluster, what does status=delegated_remote O... by ben_leung Builder in Deployment Architecture 06-27-2018 3 5	3	5
Help Please! Couldn't determine $SPLUNK_HOME or $SPLUNK_ETC; I've been getting this error: ./splunk add monitor /var/log/*log ERROR: Couldn't determine $SPLUNK_HOME or $SPLUNK_E... by jcal Engager in Deployment Architecture 06-27-2018 1 2	1	2
VDI dynamic VMs and Splunk forwarders How do you go about ensuring splunk forwarders forward all data from a gold image created VM that then gets blown awa... by ShaunBaker Path Finder in Deployment Architecture 06-26-2018 0 0	0	0
What does -# mean at the end of my frozen buckets? I am working on a script to thaw frozen buckets. Part of my script is to validate that the selected buckets are valid... by sniderwj Explorer in Deployment Architecture 06-26-2018 0 0	0	0
what is the endpoint for splunk to export user session from dynatrace? i have attached snapshot which i have done for elastic search , want same to do with splunk enterprise to export user... by AjayKumarGupta Engager in Deployment Architecture 06-26-2018 1 0	1	0
Trouble with custom indexer Hi, all I created custom indexer with default parameters and for files/folder monitor define it indexer. After added ... by keekkenen Engager in Deployment Architecture 06-26-2018 0 1	0	1
Hi All, I would like to know how to hook the callback to Splunk light weight forwarder While pumping the logs from the device to splunk through light weight splunk forwarder( LWF ), due some issues if dev... by Chennai_999 New Member in Deployment Architecture 06-25-2018 0 0	0	0
AWS logs via Kinese splunk destination Http Event Collector getting indexed but not displaying in Splunk Apps I have AWS cloudtrail, vpc flow logs and cloudwatch logs being indexed and are searchable in splunk via kinesis fireh... by bg10010 New Member in Deployment Architecture 06-25-2018 0 0	0	0
Splunk universal forwarder Developers are sending a log in json format. But splunkforwarder is reading the log as single line text. What migt th... by vj5 New Member in Deployment Architecture 06-25-2018 0 3	0	3
duplicate RT alerts in Search Head Cluster We have an issue with quite a number of duplicate alerts, all but 1 are real time searches. One example there were 5... by sat94541 Communicator in Deployment Architecture 06-25-2018 0 1	0	1
Proofpoint in the distributed environment Please can anyone provide insight on this prrofpoint apps for splunk. Is it required to install Proofpoint Email sec... by Nadhiyaa Path Finder in Deployment Architecture 06-25-2018 0 3	0	3
List all deploy clients without an assigned server-class Does anyone have a good way to list out all clients that do not fall within any of the defined server-classes? I've ... by linuxchuck Explorer in Deployment Architecture 06-25-2018 0 3	0	3
where these custom indexes are getting stored on indexer server? I have created indexes using splunk web. can anyone tell where these custom indexes are getting stored on indexer se... by vowner Engager in Deployment Architecture 06-25-2018 0 2	0	2
why my indexes are filling up quickly Hello I have an index(es) that are beginning to rapidly fill up,how can i determine the reason and solve it?! Thanks ... by MAMAOUI Explorer in Deployment Architecture 06-25-2018 0 1	0	1