Deployment Architecture

Community Activity

Why can't I set up multiple stateOnClient parameters on the DeploymentServer? For this serverclasses.conf [global] crossServerChecksum = true [serverClass:for-fwd] whitelist.0 = for-fwd blackli... by Aftend1971 Explorer in Deployment Architecture 03-27-2018 0 3	0	3
About the connection between the license master and license slaves Question about "About the connection between the license master and license slaves", is this the same behavior like b... by amielke Communicator in Deployment Architecture 03-27-2018 0 3	0	3
Search head cluster failure with 2 of 3 nodes - Can the user access Search head ? I have 3 nodes Search Head Cluster, User access the single FQDN and my F5 load balancer share the load to these 3 sea... by splunker12er Motivator in Deployment Architecture 03-26-2018 0 2	0	2
How to migrate Splunk from SLES to RedHat? Our SLES shop is becoming a RedHat shop, so it's necessary to migrate our Splunk cluster. My current config is a sing... by hgraylin New Member in Deployment Architecture 03-26-2018 0 0	0	0
How can I propagate changes to /system/local .conf files across a search head cluster? I want to make some changes to certain .conf files in system local for my search head cluster. I know that the deplo... by markfocella Explorer in Deployment Architecture 03-26-2018 0 2	0	2
Right procedure modify outputs.conf or any systems config files on SHC ?? How do I update outputs.conf on the Splunk SH Clusters? I had set up outputs.conf with below during initial setup [... by Harishma Communicator in Deployment Architecture 03-26-2018 0 1	0	1
How can I add Search head to Search Peer to ClusterMaster via .conf or CLI? Hello, How can I add Search head to Search Peer to ClusterMaster via .conf or CLI ? I have standalone SH (no shclust... by Aftend1971 Explorer in Deployment Architecture 03-25-2018 0 3	0	3
How can we onboard lots of data while maintaining cluster stability? Quite often we onboard new clients with new data loads, which is a one-time scenario for this customer. During these ... by ddrillic Ultra Champion in Deployment Architecture 03-24-2018 0 1	0	1
How to compare knowledge objects on two search heads? What’s the best way to write a query to list all knowledge objects on a search head, and then compare it to the knowl... by alvamnny Engager in Deployment Architecture 03-24-2018 0 2	0	2
Is there a length limit for clientName? Hi, Wanted to know if there is a length limit to the clientName property that is set in the deploymentclient.conf? Re... by ilyaresh Path Finder in Deployment Architecture 03-22-2018 0 2	0	2
On a new Splunk Forwarder installation the Command Line Interface doesn't work when login authentication is needed This is on a new installation. Linux OS. The install and setup went smoothly enough and using some canned config fi... by thomasaross New Member in Deployment Architecture 03-22-2018 0 2	0	2
Why is search head cluster not showing the search head members? I am not able to view search head members in the Members listed. I have 2 search head nodes one acting as captain (xx... by dhawal_sanghvi New Member in Deployment Architecture 03-22-2018 0 5	0	5
Deploying content to SH without resarting splunk Our splunk env's are fed their content and config via github. As a result someone coudl deploy something and the SH w... by brent_weaver Builder in Deployment Architecture 03-21-2018 0 2	0	2
DR - 2 SH License master with one license Hi, Architecture I have a multisite cluster with one search head on each site (but no search head cluster). I have 3 ... by hsbcboscnicolas New Member in Deployment Architecture 03-21-2018 0 5	0	5
Splunk keeps indexing after data input is disabled Hi, I can't get my mind around this issue which is as follows: We have a syslog-ng which dumps data from 100+ netwo... by eirika Engager in Deployment Architecture 03-21-2018 0 5	0	5
Issues handling rolled over gzip archives Hi, We are using Splunk forwarder (splunkforwarder-6.6.2-4b804538c686-linux-2.6-x86_64-manifest) to gather logs from... by markmitrushkin New Member in Deployment Architecture 03-21-2018 0 6	0	6
How to create a role with limited admin capabilities to put a cluster in maintenance mode? Basically I need to make a Splunk account with limited admin capabilities, one of them being able to put the cluster ... by mikebaker Engager in Deployment Architecture 03-20-2018 1 1	1	1
Can a deployer deploy to a non-clustered search head? I have a setup with clustered indexers and one non-clustered search head. I'd like to be able to deploy changes to t... by pcsegal Explorer in Deployment Architecture 03-20-2018 0 1	0	1
Stop concurrent scheduled summary update in clustered env I have a scheduled search that updates a summary index. On our non clustered splunk search head it would execute ever... by proylea Contributor in Deployment Architecture 03-20-2018 2 4	2	4
How to measure web traffic variance between servers with ITSI metric? This sounds more complicated than it really is. At the root, I want to know if web traffic is balanced across my web... by FeatureCreeep Path Finder in Deployment Architecture 03-19-2018 0 3	0	3
Can I add some timeout to cluster-config CLI command ? Can I add some timeout to cluster-config ? Seems that if master is not available, this command immediately shows a "... by Aftend1971 Explorer in Deployment Architecture 03-19-2018 0 0	0	0
Need advice on consolidating Search heads ( USERS, Searches, Apps, etc ) I thought I would get some expert advice before manually moving Users Searches Dashboards from one SH to another. I ... by Log_wrangler Builder in Deployment Architecture 03-19-2018 0 5	0	5
I'm not doing it right. This is the error that I'm getting when I try to open Splunk..... "Splunk> Now with more code! Checking prerequisit... by DeweyStew Engager in Deployment Architecture 03-18-2018 0 9	0	9
control the indexing of the forwarders Good afternoon Currently we work in a cluster environment and we need to have a better control of the data that... by efaundez Path Finder in Deployment Architecture 03-18-2018 0 8	0	8
How to remove a search head member from cluster ? I am following the below process to remove a search head cluster member https://docs.splunk.com/Documentation/Splunk/... by danielwan Explorer in Deployment Architecture 03-17-2018 0 3	0	3