Deployment Architecture

Community Activity

Not getting all the files from forwarders Hi, I know there are lot of questions under the same topic,but i am stuck.i have an application server which forward... by carlyleadmin Contributor in Deployment Architecture 01-19-2018 0 11	0	11
How to change the SPLUNK_DB path on first run for 7.0.1 I need to change the location of all DB on first run, as the /opt/splunk doesn't have space to support the data. When... by jstockt New Member in Deployment Architecture 01-19-2018 0 2	0	2
Adding indexer cluster peers with different volume structures We're in the process of upgrading our indexer cluster, with the plan ultimately being to phase out the old indexer cl... by cdoebert Path Finder in Deployment Architecture 01-19-2018 0 5	0	5
How can I take Backup of My Saved Searches,Macros and Index Data ? Hi All, I am trying to move my entire project code into another server .So how can i arrange that set up . Mainly W... by ajayabburi508 Path Finder in Deployment Architecture 01-18-2018 1 9	1	9
Migrate from one index to another index with data integrity control Hi All, I recently have a new requirement to turn on data integrity control for a index ("X"). However, as the index... by lyukai New Member in Deployment Architecture 01-18-2018 0 2	0	2
How do you change the ulimits with Splunk 6.1 when starting from init.d? Can anyone explain the ulimit (max open files) behavior of Splunk 6.1? I've tried the traditional approach (adding e... by Lowell Super Champion in Deployment Architecture 01-18-2018 0 3	0	3
Changing/adding the clustering "Secret Key" to an existing cluster. I'm looking for information or suggestions about how to proceed with this. When configuring a cluster in Splunk, it ... by Ricapar Communicator in Deployment Architecture 01-18-2018 0 3	0	3
About server specifications I want to confirm about Splunk server specifications, For example, there are 1000 users who use the application, and... by zhenzhao New Member in Deployment Architecture 01-18-2018 0 1	0	1
Splunk forwarder read file content using sftp protocol Hi all, is it possible to configure Splunk forwarder to read a log file using sftp protocol? I have a log file on a r... by massit Explorer in Deployment Architecture 01-17-2018 0 2	0	2
Help with Time prefix and date format What time prefix and time format should I use. I will appreciate your help with this one. =INFO REPORT==== 15-Jan-20... by nipendo Engager in Deployment Architecture 01-17-2018 0 4	0	4
Distributed search error on GUI configuration: entry not saved After entering the search peer information into the Distributed Search-Add search peers window, I get the following e... by landen99 Motivator in Deployment Architecture 01-17-2018 0 6	0	6
How to increase pool size I have 3 pools in the production environment.I want to increase the licence of the one pool, by reducing the licence ... by Utkarsh_Singh New Member in Deployment Architecture 01-16-2018 0 1	0	1
Index cluster with multiple partitions Im looking to take advantage of faster disks for specific index's. Would there be any issues if I setup my index clus... by mike11339 Explorer in Deployment Architecture 01-16-2018 0 2	0	2
How to Calculate total Search Load for my Search Head Clustering Deployment? Can you please help us in letting know calculation on how our search concurrency limit is being hit in my Search Hea... by sat94541 Communicator in Deployment Architecture 01-16-2018 1 3	1	3
eventType=connect_fail and TcpOutputProc timed out Hello, I recently inherited an environment running splunk and am trying to work through some issues -- I'm seeing th... by alexraber New Member in Deployment Architecture 01-16-2018 0 3	0	3
Migration from standalone Splunk instance to Indexer cluster when all data arrives over data diode Currently we have a standalone Splunk instance. All of the data that is indexed comes as UDP data over a data diode... by walkerhound Path Finder in Deployment Architecture 01-16-2018 0 4	0	4
Splunk cluster without license master and index data replication HI is it possible to build a Splunk cluster without a license master and index data replication?? Thanks in advance... by samaikins New Member in Deployment Architecture 01-16-2018 0 6	0	6
Fixing Splunk SH cluster where one member left (Disk Failure) Hi, We had four members in SH cluster (all in VM) and the setup was working properly until yesterday. Today one of t... by ramesh_babu71 Path Finder in Deployment Architecture 01-15-2018 0 10	0	10
Index path not updating correctly Splunk Version 6.6.2 I am getting lack of space errors due to poor set-up of our Splunk environment and am trying to ... by Kozanic Path Finder in Deployment Architecture 01-15-2018 0 11	0	11
pipe and data carry through sourcetype=mfgtestengsoftware \| search "Result Logged" "Results{}.Pass"=true "B1611" "Results{}.Name"="29.[111.1] TP... by Lynyrd Explorer in Deployment Architecture 01-15-2018 1 5	1	5
I have question regarding configuration of splunk heavy forwrader setup Hi , I am new in splunk and trying to set up a test environment with free license of splunk enterprise. Below are so... by kaushal21rajput New Member in Deployment Architecture 01-13-2018 0 6	0	6
Change the source of an OPSEC LEA connection We are using the Splunk Add-on for Check Point OPSEC LEA and it is working ok. We need to change the log source host... by deeades New Member in Deployment Architecture 01-12-2018 0 0	0	0
Waiting for requisite number of peers to join the cluster - https://127.0.0.1:8089. Cluster has only 0 peers (waiting for 3 peers to join the cluster) I am receiving this error on my CM. The peer nodes are not able to join CM by ashishlal82 Explorer in Deployment Architecture 01-12-2018 0 9	0	9
Distribute search: Authentication fails after restart After a restart, the "Distributed search > Search peer > status" is down and I have to reenter the authentication to ... by rlmalci Explorer in Deployment Architecture 01-11-2018 0 2	0	2
Can i use wildcard for the indexes.conf indexer name? I am trying to use wildcard to the indexer name is it possible? example: i have indexes name with a patern name and ... by jondellfrjavier Explorer in Deployment Architecture 01-11-2018 0 4	0	4