Deployment Architecture

Community Activity

How to migrate Splunk from SLES to RedHat? Our SLES shop is becoming a RedHat shop, so it's necessary to migrate our Splunk cluster. My current config is a sing... by hgraylin New Member in Deployment Architecture 03-26-2018 0 0	0	0
How can I propagate changes to /system/local .conf files across a search head cluster? I want to make some changes to certain .conf files in system local for my search head cluster. I know that the deplo... by markfocella Explorer in Deployment Architecture 03-26-2018 0 2	0	2
Right procedure modify outputs.conf or any systems config files on SHC ?? How do I update outputs.conf on the Splunk SH Clusters? I had set up outputs.conf with below during initial setup [... by Harishma Communicator in Deployment Architecture 03-26-2018 0 1	0	1
How can I add Search head to Search Peer to ClusterMaster via .conf or CLI? Hello, How can I add Search head to Search Peer to ClusterMaster via .conf or CLI ? I have standalone SH (no shclust... by Aftend1971 Explorer in Deployment Architecture 03-25-2018 0 3	0	3
How can we onboard lots of data while maintaining cluster stability? Quite often we onboard new clients with new data loads, which is a one-time scenario for this customer. During these ... by ddrillic Ultra Champion in Deployment Architecture 03-24-2018 0 1	0	1
How to compare knowledge objects on two search heads? What’s the best way to write a query to list all knowledge objects on a search head, and then compare it to the knowl... by alvamnny Engager in Deployment Architecture 03-24-2018 0 2	0	2
Is there a length limit for clientName? Hi, Wanted to know if there is a length limit to the clientName property that is set in the deploymentclient.conf? Re... by ilyaresh Path Finder in Deployment Architecture 03-22-2018 0 2	0	2
On a new Splunk Forwarder installation the Command Line Interface doesn't work when login authentication is needed This is on a new installation. Linux OS. The install and setup went smoothly enough and using some canned config fi... by thomasaross New Member in Deployment Architecture 03-22-2018 0 2	0	2
Why is search head cluster not showing the search head members? I am not able to view search head members in the Members listed. I have 2 search head nodes one acting as captain (xx... by dhawal_sanghvi New Member in Deployment Architecture 03-22-2018 0 5	0	5
Deploying content to SH without resarting splunk Our splunk env's are fed their content and config via github. As a result someone coudl deploy something and the SH w... by brent_weaver Builder in Deployment Architecture 03-21-2018 0 2	0	2
DR - 2 SH License master with one license Hi, Architecture I have a multisite cluster with one search head on each site (but no search head cluster). I have 3 ... by hsbcboscnicolas New Member in Deployment Architecture 03-21-2018 0 5	0	5
Splunk keeps indexing after data input is disabled Hi, I can't get my mind around this issue which is as follows: We have a syslog-ng which dumps data from 100+ netwo... by eirika Engager in Deployment Architecture 03-21-2018 0 5	0	5
Issues handling rolled over gzip archives Hi, We are using Splunk forwarder (splunkforwarder-6.6.2-4b804538c686-linux-2.6-x86_64-manifest) to gather logs from... by markmitrushkin New Member in Deployment Architecture 03-21-2018 0 6	0	6
How to create a role with limited admin capabilities to put a cluster in maintenance mode? Basically I need to make a Splunk account with limited admin capabilities, one of them being able to put the cluster ... by mikebaker Engager in Deployment Architecture 03-20-2018 1 1	1	1
Can a deployer deploy to a non-clustered search head? I have a setup with clustered indexers and one non-clustered search head. I'd like to be able to deploy changes to t... by pcsegal Explorer in Deployment Architecture 03-20-2018 0 1	0	1
Stop concurrent scheduled summary update in clustered env I have a scheduled search that updates a summary index. On our non clustered splunk search head it would execute ever... by proylea Contributor in Deployment Architecture 03-20-2018 2 4	2	4
How to measure web traffic variance between servers with ITSI metric? This sounds more complicated than it really is. At the root, I want to know if web traffic is balanced across my web... by FeatureCreeep Path Finder in Deployment Architecture 03-19-2018 0 3	0	3
Can I add some timeout to cluster-config CLI command ? Can I add some timeout to cluster-config ? Seems that if master is not available, this command immediately shows a "... by Aftend1971 Explorer in Deployment Architecture 03-19-2018 0 0	0	0
Need advice on consolidating Search heads ( USERS, Searches, Apps, etc ) I thought I would get some expert advice before manually moving Users Searches Dashboards from one SH to another. I ... by Log_wrangler Builder in Deployment Architecture 03-19-2018 0 5	0	5
I'm not doing it right. This is the error that I'm getting when I try to open Splunk..... "Splunk> Now with more code! Checking prerequisit... by DeweyStew Engager in Deployment Architecture 03-18-2018 0 9	0	9
control the indexing of the forwarders Good afternoon Currently we work in a cluster environment and we need to have a better control of the data that... by efaundez Path Finder in Deployment Architecture 03-18-2018 0 8	0	8
How to remove a search head member from cluster ? I am following the below process to remove a search head cluster member https://docs.splunk.com/Documentation/Splunk/... by danielwan Explorer in Deployment Architecture 03-17-2018 0 3	0	3
Index Retention Hi, If I just mention frozenTimePeriodInSecs as 30 days , how does Splunk roll the buckets exactly so that the data... by nawazns5038 Builder in Deployment Architecture 03-16-2018 0 3	0	3
Disk space on /opt/splunk below the minimum of 5000MB In my production environment, I have around 4 Splunk environments. I keep observing every alternate day, in splunk we... by rchittip Path Finder in Deployment Architecture 03-16-2018 0 2	0	2
exit_code=255 ERROR dispatchRunner Hello, I am expanding my environment from an Indexer Cluster composed by one Indexer and two Search Heads, to an Ind... by LordLeet Path Finder in Deployment Architecture 03-16-2018 0 4	0	4