Deployment Architecture

Community Activity

Can I specify another location for splunk to look for apps? I am working on automation and I would like to know if there is a way to configure splunk ALSO look to an alt directo... by brent_weaver Builder in Deployment Architecture 03-10-2018 0 3	0	3
Different storage space occupancy within index cluster Dear Splunk community, I'm relative new within the splunk cluster topic. Since three years I'm using Splunk in a st... by seilemor Engager in Deployment Architecture 03-09-2018 0 6	0	6
Why New Index is disabled by default after creation? Hello, after creation , the index is disabled by default (so to manually enable I need to restart server). is there a... by andrewpagans Path Finder in Deployment Architecture 03-09-2018 0 2	0	2
Why is there a failure error when integrating splunk SH cluster with Indexing Cluster? We have 3 node indexer Cluster and have setup a 3 node Search Head(SH) cluster. We are trying to integrate the SH clu... by dannyard New Member in Deployment Architecture 03-08-2018 0 3	0	3
Multisite Indexer Clustering I am looking at possible setting up multisite indexer clustering on some new indexers we are setting up. We have 2 i... by jeffbat Path Finder in Deployment Architecture 03-08-2018 0 3	0	3
What areas to investigate for an overall health check of our distributed Splunk instance? Good Day all, We have a distributed splunk instance running for 3 years and recently a couple of our other servers ... by ranjitbrhm1 Communicator in Deployment Architecture 03-07-2018 0 1	0	1
New HF in 7.01 - how to add to license/deployment server? I have a small Splunk installation and I'm adding a new HF. I just upgraded my current servers to 7.0.1. When I per... by reswob4 Builder in Deployment Architecture 03-07-2018 0 1	0	1
Cleaning Indexes not working Hi SplunkBase Trying out the free version (4.2.4) on my Windows 7 64bit client and as you can guess, hit an index lim... by johnness Explorer in Deployment Architecture 03-07-2018 3 7	3	7
Multiple Search Heads - Possible Clustering of Virtual and Physical? What started as a plan to stand up a new/additional VM Search Head dedicated to a specific department in IT has turne... by jlemoine Path Finder in Deployment Architecture 03-06-2018 0 4	0	4
Performance problem OPC UA for Splunk Hi, I'm having problems when getting metrics to add a new input on OPC UA for Splunk. My OPC server is conected with... by CleberLupianhez New Member in Deployment Architecture 03-06-2018 0 0	0	0
limit bin entries to 1 How do I limit the Upper and Lower limits to just 1, rather than 40 or 50 values by Lynyrd Explorer in Deployment Architecture 03-05-2018 0 1	0	1
How to produce rows for non-existing time buckets? I have produced a table like this: +----------+---------+---------+-------+ \| _time \| field_1 \| field_2 \| count \|... by neilli92 New Member in Deployment Architecture 03-05-2018 0 13	0	13
Indexing historical EVTX event logs Hi all, Bit of a niche problem. We have a server that we need to perform analysis on it's Windows System logs, so we... by stevejfice Path Finder in Deployment Architecture 03-05-2018 1 0	1	0
How to prevent Deployment Server spoofing in public networks Scenario I have laptops with Universal Forwarder. The UFs are configured as Deployment Clients. They download and ru... by helge Builder in Deployment Architecture 03-04-2018 0 0	0	0
Two serverclass.conf files - now what? Hi, Because of the ridiculous nature in which Splunk handles serverclass.conf via the gui (really? I can create mul... by a212830 Champion in Deployment Architecture 03-02-2018 2 10	2	10
How can I increase the disk usage quota for one user? One particular user keeps getting the following message - Your search has been queued: The maximum disk usage quota... by ddrillic Ultra Champion in Deployment Architecture 03-01-2018 0 5	0	5
Splunk 6.4.0: Forwarding using CA signed SSL certs doesn't work as documented? I am following the documentation here (set for version 6.4.0): https://docs.splunk.com/Documentation/Splunk/7.0.2/Sec... by aaron_schmuhl Engager in Deployment Architecture 03-01-2018 0 0	0	0
Does Splunk need to go through all the file after restart before indexing new events? Hi, I would like to ask if anyone experience this or have a solution to this. I have a forwarder which is reading... by quahfamili Path Finder in Deployment Architecture 03-01-2018 0 1	0	1
Help configuring forwarder on Windows 2008R2 for DHCP & RADIUS logs I am attempting to add the DHCP and RADIUS logs on a server installed with the Splunk Forwarder. I have the followin... by Sparky70 New Member in Deployment Architecture 02-28-2018 0 3	0	3
Why would Splunk identify one of the server roles of my indexer as a License Master within the Monitoring console ? Why would Splunk identify one of the server roles of my indexer as a License Master within the Monitoring console und... by mhouse3 Path Finder in Deployment Architecture 02-28-2018 0 2	0	2
what is thawed directory and when does data move to thawed directory? After red splunk document, i still confuse thawed directory and frozen. i would like to ask you, what is thawed direc... by SoknySplunk Loves-to-Learn Lots in Deployment Architecture 02-27-2018 0 2	0	2
Why do the multiple deployment servers behind Load Balancers, have different checksum values? We have 8 deployment servers. Since some time back we started to have symptoms like checksum mismatch in splunkd.log ... by sylim_splunk Splunk Employee in Deployment Architecture 02-27-2018 1 1	1	1
failing to send data from the windows 2012 R2 host to linux splunk indexer failing to send data from the windows 2012 R2 host to linux splunk indexer Below is the error: How to fix the error ... by Nadhiyag Explorer in Deployment Architecture 02-27-2018 0 1	0	1
How to delete data older than X number of days Manually Hello, I got a problem, I dont have space anymore and I want to delete data thats older than X days manually, I've... by nickbijmoer Path Finder in Deployment Architecture 02-27-2018 0 10	0	10
Is there way to customize the Payload when Splunk calls webhook? I am calling webhook when certain alert triggers in splunk, I want to exact payload by looking at the alert result so... by rrkollip New Member in Deployment Architecture 02-26-2018 0 1	0	1