Deployment Architecture

Community Activity

Is backing up data necessary in an indexer cluster? Since in an indexer cluster the data is replicated to other indexers, is backing up the data to somewhere else strict... by FoolMoon Engager in Deployment Architecture 04-18-2018 0 1	0	1
expand heavy forwarder My logs volume increased and notice time out on my heavy forwarder, which is best way to add capacity increase the si... by raindrop18 Communicator in Deployment Architecture 04-18-2018 0 9	0	9
How to detect "OS Command Injection" by Splunk? Hola-! Any suggesting or solutions how to detect OS Command Injection by Splunk? Solutions like to monitor all comman... by test_qweqwe Builder in Deployment Architecture 04-18-2018 0 0	0	0
Jenkins and Splunk Integration: Why is the Splunk server not fetching any data from Jenkins? I have uploaded the Splunk Plugin in Jenkins and after setting all configurations, Test Connection shows Splunk conne... by swati1205 New Member in Deployment Architecture 04-17-2018 0 0	0	0
How to increase the number of pipeline sets in Heavy forwarder on a distributed environment? Hi Folks , We would like to increase the number of pipeline set in the heavy forwarder to ensure data ingestion meet... by Hemnaath Motivator in Deployment Architecture 04-17-2018 0 6	0	6
Why is the app with only index changed not working? Hello all, I have been trying to get out environments/indexes organized and I'm running in to some trouble. I am try... by mlahey Engager in Deployment Architecture 04-17-2018 0 3	0	3
SNMP Modular Input setup for listening IPv6 traps fails Hello All, I am trying to setup my Splunk server to listen for IPv6 SNMP traps using the SNMP Modular Input app. I u... by rajkiran8992 New Member in Deployment Architecture 04-17-2018 0 2	0	2
How to edit serverclass.conf by CLI? Normally I would use the deployment server GUI under setting > Distributed Environment > Forwarder management to crea... by Log_wrangler Builder in Deployment Architecture 04-17-2018 0 6	0	6
How to find the server is pointed to correct deployment server Hi, In my environment i have 2 deployment servers, were DTA servers are mapped to DTA deployment server and PRD for ... by sarikondaprasad New Member in Deployment Architecture 04-16-2018 0 3	0	3
I like to add a second search peer with a different Windows OS (2008R2) then my main Splunk platform 2012R2 - is that possible? Hi, I am confused by the documentation and all other answers and info, here and there. I like to add a second searc... by apietersen Contributor in Deployment Architecture 04-16-2018 0 2	0	2
Cluster bundle stuck in validation mode? We have 40 node Indexer cluster setup on Splunk version 6.6. We push a bundle and only 3 of the 32 indexers have val... by rbal_splunk Splunk Employee in Deployment Architecture 04-16-2018 0 1	0	1
Why is the Search Head Cluster getting Caught in the Restart Loop? It has been reported by some that members of a Search Head Cluster (SHC) will sometimes get caught in a restart loop ... by cstump_splunk Splunk Employee in Deployment Architecture 04-16-2018 1 1	1	1
How to find the passwd file under /splunk/etc directory in Linux Ubuntu? I have installed splunk in my Linux Ubuntu system. I have forgot the admin password and now I am trying to retrieve i... by Swatikeshari New Member in Deployment Architecture 04-16-2018 0 1	0	1
index-cluster We have two indexer, When I created new index on Master Node and pushed them into 2 indexer, Only one Indexer can rec... by vumanhtai Path Finder in Deployment Architecture 04-14-2018 0 5	0	5
Clarification on Clustering & Index Replication Hi All, In reading a recently posted (16 Oct 2013) Splunk blog post "Clustering Optimizations in Splunk 6", the foll... by rturk Builder in Deployment Architecture 04-14-2018 1 5	1	5
Are there any subtleties to setting up a search head cluster in docker containers that could result in a Search Head Clustering(not enabled on this node)? Hello, I have seen how common this issue seems to be, but have not been able to get my search head cluster to set up... by dtow1 Path Finder in Deployment Architecture 04-13-2018 0 3	0	3
In our environment we have two search head (A & B) In our environment we have two search head (A & B) but we have configured A search head nearly 3000 Scheduled alert ... by satkan100 Path Finder in Deployment Architecture 04-13-2018 0 2	0	2
Is forwardedindex.. only applicable for TCP connection? Hi, I am using heavy forwarder to forward syslogs to a 3rd party syslog aggregator. I am trying to filter some of th... by cemiam Path Finder in Deployment Architecture 04-13-2018 0 12	0	12
How do you synchronize serverclass.conf and your deploymentapps across loadbalanced deployment servers? I was wondering how the community handled this challenge? As our forwarder infrastructure is growing we are looking ... by paimonsoror Builder in Deployment Architecture 04-12-2018 0 3	0	3
Heavy Forwarder without EFK I am quite new in Splunk architecture (Open Shift Plattform) . We are using EFK Nodes in our plattform (bare metall) ... by netuse1955 New Member in Deployment Architecture 04-12-2018 0 1	0	1
Configure "Run a script" and push script using REST API I want to configure "run a script" using rest end point. I do not find any REST PI to do that apart from deprecated ... by yashveer_arya Engager in Deployment Architecture 04-11-2018 0 0	0	0
getting bombarded with windows security error code 5156 and 5157 (Win security) Hello All, I have a distributed system where i have a heavy forwarder collecting traffic from the UF's and forward... by ranjitbrhm1 Communicator in Deployment Architecture 04-11-2018 0 4	0	4
Unable to anonymise data even after we have right regex. I have a log file as detailed below. "02d4224f-8cc8-48b4-a06d-034a97ad68a8-333999","2018-03-24T04:58:09.280Z","OPENI... by vikram_m Path Finder in Deployment Architecture 04-11-2018 0 3	0	3
AutoLB Volume Hi All, I have 60 indexers and 40 forwarders, I want to set the AutoLB volume, do you know a metric search to calcul... by asabatini85 Path Finder in Deployment Architecture 04-11-2018 0 3	0	3
Moving SPLUNK_HOME My forwarder was installed under a non standard folder. /opt/splunkforwarder I noticed that the tar file for the ver... by pfabrizi Path Finder in Deployment Architecture 04-11-2018 0 2	0	2