Deployment Architecture

Community Activity

Is there a .conf file that shows which apps are associated with a serverclass? I understand that you can determine which apps are in which serverclass through the Forwarder Management GUI. Is ther... by andrewhlui Explorer in Deployment Architecture 12-14-2017 0 5	0	5
I want to keep all hot/warm buckets under /opt/Splunk_hot dir and cold to /opt/Splunk_cold dir. I want to keep all hot/warm buckets under /opt/Splunk_hot dir and cold to /opt/Splunk_cold dir. I have updated all a... by ansif Motivator in Deployment Architecture 12-14-2017 0 2	0	2
SHC captainの確認方法について Search Head Clustering (SHC) のバージョン6.5.0を使っていますが、sshを使って、SHCの各ノードにアクセスする権限はないので、"splunk show shcluster-status"コマンドからS... by cwl Contributor in Deployment Architecture 12-13-2017 0 1	0	1
Is it OK to roll out the same indexes.conf on all indexer peers via a configuration management tool rather than the indexer master? I am managing a Splunk indexer cluster. I understand the office approach to creating a replicable index is creating a... by danielwan Explorer in Deployment Architecture 12-13-2017 0 4	0	4
Restarting the Splunk after updating input.conf Hi, I am new to Splunk and I need your guidance. We have Splunk landscape with deployment server, cluster master, 3 ... by rkilari Engager in Deployment Architecture 12-12-2017 0 2	0	2
Normal User role to access and add Data Inputs in Search Head Server Hi Team, I have recently installed (https://splunkbase.splunk.com/app/1546/#/overview) this app in our search head. ... by anandhalagarasa Path Finder in Deployment Architecture 12-12-2017 0 5	0	5
frozenTimePeriodInSecs points to age of data only in cold bucket or summation of all stages i.e Hot, Warm and Cold ? My client requires 30 day "active" storage and 90 day "cold" storage standard. So, total data should be deleted after... by damode Motivator in Deployment Architecture 12-12-2017 0 10	0	10
Splunk Deployment server not downward compatible? Hi there, just for a background. We use an existing Splunk setup since a couple of years. The old Splunk single host... by krusty Contributor in Deployment Architecture 12-12-2017 0 7	0	7
How to get a universal forwarder GUID from deployment server via API? I'm trying to create a script to delete computers from deployment servers (ds) that were decommissioned. I think I ca... by manickama1 New Member in Deployment Architecture 12-11-2017 0 4	0	4
How to prevent some search heads from searching on a specific index that has sensitive data? We have one index on our indexer cluster that has sensitive data. We want to set up a standalone search head that ha... by lemmons2 New Member in Deployment Architecture 12-09-2017 0 4	0	4
Setting Indexer-discovery in a multi-site cluster-indexer with SSL I’m setting up a multisite ssl indexing-cluster with splunk 6.4.1 . I want to use indexer discovery. I succeed in s... by breddupuis Explorer in Deployment Architecture 12-08-2017 1 3	1	3
Search Head Cluster concurrency context configuration (instance-wide) vs logs (cluster-wide) Hello there, We have a Search Head Cluster in 6.5.3 which configured by default in "member by member". Our configur... by support0 Path Finder in Deployment Architecture 12-08-2017 0 1	0	1
Network Traffic with Stream Hi! I would like to monitor to total amount of traffic leaving and entering my home network. I have the following se... by fludorf_splunk Splunk Employee in Deployment Architecture 12-07-2017 0 3	0	3
Is search head clustering information stored in any configuration file? I am planning to use configuration management tool like Chef to manage my search head cluster. I knew I can use splu... by danielwan Explorer in Deployment Architecture 12-06-2017 0 2	0	2
Can I still search head cluster, indexer cluster on top of single host? I have a search head cluster connected to indexer cluster. I would like to set up a single host where I can install s... by danielwan Explorer in Deployment Architecture 12-06-2017 0 1	0	1
How do you report on the search head cluster availability score (99.9999% score)? I am tasked with reporting on our Splunk environment. I am running a Search Head cluster with 3 Search Heads and an ... by gduggan1 Path Finder in Deployment Architecture 12-05-2017 0 3	0	3
Load Balancer between Heavy Forwarder and Indexers We have implemented 3rd party hardware load balancer between heavy forwarder (which is different network - Customer s... by ansif Motivator in Deployment Architecture 12-05-2017 0 4	0	4
Search Head Cluster - Scheduled Search Running only in one instance Hi All, We have a search head cluster with 3 search heads along with a deployer. We have a scheduled search which ru... by ykpramodhcbt Path Finder in Deployment Architecture 12-04-2017 1 4	1	4
How to use deployer to push app to the search head cluster? After I installed "Splunk Machine Learning Toolkit" to the deployer (as a test), I want to push it to the search head... by irsysintegratio Path Finder in Deployment Architecture 12-04-2017 1 5	1	5
Distributed Search Configuration I am trying to configure my search head to search my indexer and i keep receiving the following error: Error while s... by jthairu_splunk Splunk Employee in Deployment Architecture 12-04-2017 0 5	0	5
Why does authorize.conf reside on the default directory of the search head? On the deployer server we have the authorize.conf under /opt/splunk/etc/shcluster/apps/key_all_authentication/local. ... by ddrillic Ultra Champion in Deployment Architecture 11-30-2017 0 2	0	2
Using more than one Management Port Hi Splunkers, Just want to ask if is it possible to use multiple Management port? Just wondering because I've encoun... by dantimola Communicator in Deployment Architecture 11-30-2017 0 5	0	5
Summary Indexes on Search Head Cluster and its affect on Indexing Volume Hi, We have 3 search heads with a search head deployer that work with 3 indexer and index master. We have a license... by ykpramodhcbt Path Finder in Deployment Architecture 11-29-2017 0 1	0	1
Why aren't the logs coming in from a Linux server I have 4 Linux servers in Forwarder Management (all of them callback) and I am collecting logs from auditd. All of th... by test_qweqwe Builder in Deployment Architecture 11-28-2017 0 3	0	3
How to deploy savedsearches.conf to single SH server via splunk function Hi teachers, Now I seek how to deploy savedsearches.conf to single SH (not SH cluster) via splunk function. The reas... by syokota_splunk Splunk Employee in Deployment Architecture 11-28-2017 0 2	0	2