Deployment Architecture

Community Activity

splunk ES I set the alart to High and security Domaiin = Network, but it appears to me in the Incident Review interface that it... by tuts Path Finder in Deployment Architecture 06-12-2024 0 0	0	0
forwarded data remove timestamp and host is there a way to remove the header comes with non syslog source types that include hostname and timestamp with prior... by KhalidAlharthi Explorer in Deployment Architecture 06-10-2024 0 4	0	4
Deployment Server Upgrade 9.2.1 and Server Class Hi Everyone,Is anyone else having issues with the Client tab not showing the correct Server Classes for the Host Name... by tasteless_dove Engager in Deployment Architecture 06-10-2024 1 7	1	7
multi-site cluster replication -in multi-site cluster if initially, the replication factor wassite_replication_factor = origin:2,total:2site_search_... by hazem Path Finder in Deployment Architecture 06-10-2024 0 3	0	3
Duplicate logs via modular input Hi Team,We are using modular input to ingest the logs into splunk, we have checkpoint file, but we see duplicate logs... by VijaySrrie Builder in Deployment Architecture 06-10-2024 0 3	0	3
multi-site We have been running our indexer cluster as a multisite cluster with 3 indexers in our main site for the past year.w... by hazem Path Finder in Deployment Architecture 06-09-2024 0 5	0	5
cold path not exis hello all, we have multi-site cluster master and we do not want a cold mount in the DR indexers.is it applicable? If... by hazem Path Finder in Deployment Architecture 06-09-2024 0 1	0	1
Has anyone configured CM redundancy using load balancer ? Current setup - Indexers --> F5 VIP --> CM CM is seeing the requests are coming F5 VIP rather than actual source ip o... by thehow Loves-to-Learn in Deployment Architecture 06-06-2024 0 0	0	0
Is there a way to reset client list on Deployment server without restarting Looking for ways to refresh client list that phone homes to Deployment server without restarting splunk service or ta... by payl_chdhry Path Finder in Deployment Architecture 06-06-2024 0 2	0	2
what could be a deployment server IP for splunk enterprise? Hello.I want to deploy Splunk Enterprise on my machine.and I am installing Universal Forwarder and I can't figure out... by R4M4L3 New Member in Deployment Architecture 06-05-2024 0 1	0	1
What is Splunk Search Head ? Can someone help me to get more idea on Splunk Search Head and how it work's ? by thevikramyadav Explorer in Deployment Architecture 06-04-2024 0 1	0	1
Indexer indexing too much I've been fighting this for a week and just spinning in circles.I'm building a new distributed environment in a lab t... by jessieb_83 Path Finder in Deployment Architecture 06-01-2024 0 2	0	2
Data migration from Exabeam to Splunk Hi,We are looking for migration guidance from Exabeam to Splunk .Is there a way to migrate data from Exabeam data lak... by btgururaj New Member in Deployment Architecture 05-30-2024 0 1	0	1
Splunk Sizing Hi,Seems like this link below is no longer working.https://splunk-sizing.appspot.com/ Does Splunk have online splunk ... by jaracan Communicator in Deployment Architecture 05-29-2024 0 1	0	1
Perfectly align DS to UFs Hi.QUESTION: is there a method/configuration to fully align a UF with the Deployment Server?Let me explain:DSServerX ... by verbal_666 Builder in Deployment Architecture 05-25-2024 0 11	0	11
Apps under search head under /opt/splunk/etc/apps/ are not replicating to search peers /opt/splunk/var/run/searchpeers/ Apps under search head under /opt/splunk/etc/apps/ are not replicating to search peers /opt/splunk/var/run/searchpeer... by vmadala Loves-to-Learn in Deployment Architecture 05-25-2024 0 2	0	2
Deployment Server Hello,Could someone please help me with this question : should the clients of the deployment server only be forwarder... by BRFZ Communicator in Deployment Architecture 05-23-2024 0 3	0	3
What is the curl command used on the deployer to apply shcluster-bundle? Looking for a REST equivalent of this apply shcluster-bundle -target command: ./splunk apply shcluster-bundle -targ... by tsunamii Path Finder in Deployment Architecture 05-21-2024 5 4	5	4
Splunk deployment My splunk web service is cannot recognize my source type in props.conf file when I try to add data. Here is my props.... by Vladislav Engager in Deployment Architecture 05-20-2024 0 1	0	1
Splunk Self-signed Certificate Error. Error setting up SSL for TCP data input from file=inputs.conf stanza="SSL" Hello. Im new at Splunk. Recently, I am trying to create and sign my own TLS certificates, following this official gu... by azer271 Path Finder in Deployment Architecture 05-20-2024 0 8	0	8
Search Peer down, distsearch.conf If I have 6 search peers configured in the distsearch.conf file but 3 of them go down, can Splunk recognize that a ho... by SecurityFeller Explorer in Deployment Architecture 05-17-2024 0 5	0	5
Enable Deployment and HEC tokens in Global settings We are generating HEC tokens on a deployment server and pushing them out to the HECs. HEC tokens are disabled by defa... by SecurityFeller Explorer in Deployment Architecture 05-17-2024 0 1	0	1
Compatibility Hello,Does Splunk 9.0 compatible with Oracle Linux? by Jyo_Reel Engager in Deployment Architecture 05-17-2024 0 1	0	1
Search Heads and Search Peers configuration Currently working on deploying Splunk on AWS to work in conjunction with our current on-prem solution and I have 2 qu... by SecurityFeller Explorer in Deployment Architecture 05-17-2024 0 2	0	2
search header cluster I deployed the search header cluster and also deployed the indexer cluster, and merged the search header cluster and ... by wangyu Loves-to-Learn Lots in Deployment Architecture 05-16-2024 0 3	0	3