Deployment Architecture

Community Activity

Remove missing/duplicate forwarders from forwarder managment This sounds like an "asked and answered" question, but my searches didn't come up with a satisfactory answer. How do... by gregplevak New Member in Deployment Architecture 08-21-2024 0 1	0	1
Search Head cluster : Multi-Cloud Search I've been out of touch with Core Splunk for sometime, so just checking if there are options for below requirementOrga... by koshyk Super Champion in Deployment Architecture 08-20-2024 0 6	0	6
The percentage of non high priority searches lagged (48%) over the last 24 hours is very high and exceeded the yellow th Hi all,How can this be fixed?Thanks for your help on this, by MarcinPiw Loves-to-Learn Lots in Deployment Architecture 08-19-2024 0 1	0	1
Expanding my splunk architecture Currently, I have a single Splunk server that is performing all the necessary functions. However, I would like to exp... by haleyh44 Path Finder in Deployment Architecture 08-15-2024 0 15	0	15
to provide the list of P1C alerts for JMET cluster from Splunk There is a request to provide the list of P1C alerts for JMET cluster from Splunkwe have provided the following quer... by Splunk-Star Loves-to-Learn Lots in Deployment Architecture 08-14-2024 0 1	0	1
New inputs.conf Settings Not Applied After Pushing Configurations from Deployment Server (Splunk 9.2.1) Hi Splunk community, I'm facing an issue with my Splunk deployment server, running on version 9.2.1 (splunk-9.2.1-788... by refahiati Explorer in Deployment Architecture 08-13-2024 0 1	0	1
app/launcher/home requires xml -- won't launch json dashboard The classic dashboard format was xml; the new Dashboard Studio format is json. Our app/launcher/home is failing to lo... by KirkA Observer in Deployment Architecture 08-13-2024 0 0	0	0
Splunk Heavy Forwarder vs Universal Forwarder for large splunk instance Hello Everyone, looking for a little guidance on our Splunk deployment for a system. Currently, we have a few diffe... by Twagner79 Explorer in Deployment Architecture 08-12-2024 0 6	0	6
Splunk bandwidth requirements Dear All,I would like to introduced the DR Site along with active log ingestion (SH cluster + Indexers cluster ).is t... by Nraj87 Explorer in Deployment Architecture 08-08-2024 0 1	0	1
Why this error on search head cluster after updating Splunk_TA_Windows? I recently updated Splunk_TA_Windows and am seeing this error on my search head cluster:[Indexers] Could not load loo... by TheBravoSierra Path Finder in Deployment Architecture 08-07-2024 0 4	0	4
Why does the Monitoring Console not update with new indexer information? I've replaced 2 or my 4 indexers in the cluster on an AWS deployment. The Indexer Cluster Status shows the right lis... by kairisrj Explorer in Deployment Architecture 08-07-2024 1 12	1	12
Can you still search logs on an indexer that is turned into a heavy forwarder We have a legacy all-in-one Splunk server. We have built out a new distributed environment that has an indexer cluste... by fredclown Builder in Deployment Architecture 08-07-2024 0 3	0	3
SplunkEnterpriseSecurity App on ClusterMaster Hi,While troubleshooting below error message: "The percentage of non high priority searches delayed (75%) over the la... by raiqb01 Engager in Deployment Architecture 08-06-2024 0 1	0	1
join query issue Hi allI am trying to fetch incident details from servicenow, but its showing duplicate values index=acn_lendlease_c... by pavithra Explorer in Deployment Architecture 08-01-2024 0 1	0	1
I want to design a disitributed splunk architecture and need to know system requirements for components Hi, I'm trying to design a distributed architecture of Splunk for my company, and I need to pitch the design to them.... by lostcauz3 Path Finder in Deployment Architecture 07-31-2024 0 5	0	5
How do i identify unneeded knowledge object I've been requested to identify unused knowledge objects. I'm honestly not sure on the best way to go about this requ... by Marko Explorer in Deployment Architecture 07-31-2024 0 3	0	3
How to deploy updates to inputs.conf, outputs.conf, and deploymentclient.conf files to the "C:\Program Files\Splunk\etc\system\local" directory? I have created an app (which includes updates for the inputs.conf, outputs.conf and deploymentclient.conf files), an ... by thomas_forbes Communicator in Deployment Architecture 07-29-2024 0 5	0	5
Why are deployment clients not showing up in deployment server? The configurations are perfect and the ping and telnet are working between the deployment server and the client but a... by Venkat_16 Contributor in Deployment Architecture 07-29-2024 0 8	0	8
Setting up a Splunk Dev Environment So i have three servers in this Splunk infrastructure, a SH, an Indexer, and a forwarder. I have installed the free 1... by Abass42 Communicator in Deployment Architecture 07-27-2024 0 8	0	8
Install problems (feature is not available) I am currently running Universal Forwarder 6.6.3 on a Windows 2012 R2 instance. I am attempting to upgrade to 7.1.1,... by jpkelly_2 New Member in Deployment Architecture 07-26-2024 0 5	0	5
distsearch.conf and the web interface when configuring a distributed search ... why when i create a new server on the web interface it asks for a username:... by hiddenkirby Contributor in Deployment Architecture 07-26-2024 0 3	0	3
lookup does not recognized in apps & lookup file can do any other apps? thanks to read and have a good day 1. we makes lookup file to use CSV File (in test enviroment), after then copy&pas... by 4mouse Engager in Deployment Architecture 07-25-2024 0 1	0	1
What is the reason for search head errors expecting forwarder directory? Dears, I am in the process of setting up a cluster environment. In the process while firing some commands on search h... by sakthiganesht Explorer in Deployment Architecture 07-25-2024 0 4	0	4
Fixing 502 errors when front-ending Search Heads with an AWS application load balancer? We have a Splunk deployment in AWS and have our Search Head Cluster front-ended with an ALB (not ELB). Users frequent... by akira_splunk Splunk Employee in Deployment Architecture 07-25-2024 4 11	4	11
indexer cluster : colddb moved on a san share Hello,Just have a question, about a test that I have in progress.I have one indexer cluster, with two servers.I decid... by Nicolas2203 Path Finder in Deployment Architecture 07-24-2024 0 6	0	6