Deployment Architecture

Community Activity

Using cluster command and showing the unique contents of each cluster - How? I have a field in my events that can vary ever so subtly named "Serial". I am using the cluster command to combine th... by thisissplunk Builder in Deployment Architecture 07-31-2018 0 4	0	4
How to migrate Single distributed search head to Search Head cluster with 3 members? Hi All, We are planning to migrate Single distributed search head to Search Head cluster with 3 members and would li... by siva_cg Path Finder in Deployment Architecture 07-31-2018 0 2	0	2
How can I get memory usage for a particular process in Linux? How can I get memory usage for a particular process in Linux? I would like to get JVM memory at a particular time. by udaymadupathi New Member in Deployment Architecture 07-30-2018 0 7	0	7
how to clear this error on cluster master How to clear the error Indexer Clustering: One or more replicated indexes may not be fully searchable. Some search ... by vrmandadi Builder in Deployment Architecture 07-30-2018 0 1	0	1
Why am I getting a 500 Internal Server Error immediately after logging into my external IP address on Ubuntu? On a new install, I am getting a 500 Internal Server Error immediately after logging into my external IP address at p... by krypterro Explorer in Deployment Architecture 07-29-2018 0 5	0	5
What might have caused "WARN ConfReplicationHandler - Configuration from app=nameofapllication does not support reload: server.conf/[shclustering]/scheduling_heuristic" Hi, We are running Splunk Enterprise version 7.0.4 on our search head cluster. We have 4 search heads on the clust... by mlevsh Builder in Deployment Architecture 07-29-2018 0 1	0	1
Are You Using the Splunk Management Port? Do you have your Splunk management port open to manage Splunk forwarders. If so what's the risk you are accepting and... by nmensah Explorer in Deployment Architecture 07-28-2018 0 1	0	1
Is there an elegant way to keep configs synchronized between two search head clusters? Since the recommended best practice is for ES to run on its own cluster, I have several ES customers that run both an... by responsys_cm Builder in Deployment Architecture 07-28-2018 0 2	0	2
Can we override the guessed date for events that have no datestamp ? Duplicate of : How to make Splunk guess the correct date if only time is given? Splunk indexes times in our source an... by pclewis Explorer in Deployment Architecture 07-27-2018 0 1	0	1
My splunk instance stop responding I have been running splunk on a server for sometime now and last week it stops responding. I don't know what could be... by tamduong16 Contributor in Deployment Architecture 07-26-2018 0 16	0	16
Getting error on search head regarding replication Search peer stmsplidxc001.xxx.com has the following message: Indexer Clustering: Too many bucket replication errors t... by vrmandadi Builder in Deployment Architecture 07-26-2018 0 9	0	9
restartSplunkd doesn't restart Splunkd Hi, I am deploying apps from deployment server. Server classes having restartSplunkd=1 gets to stop when I deploy new... by akadoya Explorer in Deployment Architecture 07-26-2018 1 5	1	5
I am trying to delete events but still i can able to see those events? I am trying to delete events but the events not getting deleted i can see those events. Below command i am use to del... by pha New Member in Deployment Architecture 07-25-2018 0 4	0	4
Are Data model acceleration searches distributed across Search head cluster ? Hi, I have search head cluster with 3 search heads. I am trying to accelerate a data model. According to data model ... by veeraras Engager in Deployment Architecture 07-25-2018 0 1	0	1
HF all queues 100% Hello Everyone. Previous to muy question, a litle context first: SOME INPUTS / UF ---> Heavy fowarder ---> VPN TUNN... by lightech1 Path Finder in Deployment Architecture 07-25-2018 1 10	1	10
How to setup local access on a search-head that uses LDAP Hi, We have a single search-head that uses LDAP for most users. However, I have a requirement to enable local accou... by a212830 Champion in Deployment Architecture 07-24-2018 0 3	0	3
How to monitor cpu utlization from linux and unix ? In my scenario I have to consolidated cpu utlization of all application in one query.But i cannot get proper output b... by karthi2809 Builder in Deployment Architecture 07-24-2018 0 1	0	1
Why am I getting an error when starting UBA? Error when starting UBA using: /opt/caspida/bin/Caspida start Starting Topologies Exception in thread "main" org.... by christopherr_sp Splunk Employee in Deployment Architecture 07-24-2018 0 1	0	1
How to get the Splunk forwarder 7.0.1 PGP key? Does anyone has link for the above mentioned PGP key,I am installing splunk forwarder and I was getting an error rega... by vrmandadi Builder in Deployment Architecture 07-23-2018 0 3	0	3
Why isn't calendar_heatmap_app being deployed to the SHs? I deployed the out-of-the-box calendar_heatmap_app from the deployer server to the three search heads. They haven't r... by ddrillic Ultra Champion in Deployment Architecture 07-23-2018 0 6	0	6
How to send data to securonix servers from splunk Hi All, Scenario: I have 10000 Universal Forwarder deployed in windows servers and those servers contains windows e... by sbbadri Motivator in Deployment Architecture 07-23-2018 0 0	0	0
Migrating Data I have 4 indexers in a cluster and need to get the data in the cold volumes migrated to a new set of storage. What w... by Kendo213 Communicator in Deployment Architecture 07-23-2018 0 3	0	3
ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf. 07-18-2018 21:20:40.725 +0000 WARN X509Verify - X509 certificate (O=SplunkUser,CN=SplunkServerDefaultCert) should no... by ahmemohs03 Explorer in Deployment Architecture 07-21-2018 0 29	0	29
sourcetype override on indexer cluster Hi guys, We have a clustered 6.5.3 deployment and following this doc to re-assign a new sourcetype to squid access lo... by eddiet Explorer in Deployment Architecture 07-21-2018 0 6	0	6
Is there any way to re-create the TSIDX files reduced by enabletsidxredctuon? Is there any way to re-create the TSIDX files by journal.gz? Previously we had enabled the walls: enabletsidxredctuo... by justodaniel Path Finder in Deployment Architecture 07-20-2018 2 4	2	4