Deployment Architecture

Community Activity

Tcpout Processor:The TCP output processor has paused the data flow.Forwardering to output group default-autolb-group has been blocked for 10 seconds.This will probably stall the data flow woeardds index ing and other net work outputs. Tcpout Processor:The TCP output processor has paused the data flow.Forwardering to output group default-autolb-group ... by wanghaiyang New Member in Deployment Architecture 11-08-2017 0 2	0	2
Splunk restart Splunk after restart does not respond: It says page cannot be displayed if refreshed, After checking the services.msc... by sr_dhinesh Path Finder in Deployment Architecture 11-07-2017 0 3	0	3
Forwarder is unable to download the updated app from deployment server Hi, Few of our forwarders are unable to download the updated apps from deployment server. Its just showing download ... by kamal_jagga Contributor in Deployment Architecture 11-07-2017 0 5	0	5
Search head cluster deployer -- "SHC deployer" isn't indicated as a server role after deploying via /shcluster Hello, could you let me know if it's a GUI bug? I use /shcluster to deploy SH configurations but the role "SHC deploy... by splunkreal Influencer in Deployment Architecture 11-07-2017 0 3	0	3
Splunk instance shut downs unexpectedly We are using Splunk instance to pull various types of data from the server. But now days we are seeing Splunk instanc... by onkarkore1 Explorer in Deployment Architecture 11-07-2017 0 1	0	1
Splunk 7.0 pricing model of metric index For a metric index, is the license usage count on the log event parsed, or the extracted metric dimensions plus measu... by elbywong Explorer in Deployment Architecture 11-06-2017 1 4	1	4
Forward raw data to remote host - avoiding outputs.conf bug Recently we configured outputs.conf/props.conf/transforms.conf on our Heavy Forwarders to forward 3 specific events t... by tlmayes Contributor in Deployment Architecture 11-06-2017 0 2	0	2
Is it possible to make a deployment server a client of itself? Is it totally crazy to make a deployment server contact itself for apps? I just thought about it and it would reduce ... by chadwagonerKGI Engager in Deployment Architecture 11-06-2017 1 4	1	4
how to remove timestamp and host of heavy forwarder from data when it being forwarded to 3rd party system Hi, I have heavy forwarder which sending data to indexers, at the same time it sending same data to Qradar SEIM. Fo... by prathamesh_aug3 New Member in Deployment Architecture 11-06-2017 0 3	0	3
Getting new node in Management Console We are runing Splunk in AWS and lost one of our Indexers. All has recovered and I have removed the dead node but cann... by brent_weaver Builder in Deployment Architecture 11-05-2017 0 1	0	1
Set Data Retention Policy to delete data on rolling basis- not entire index Hello, Below is information I received about data retention: frozenTimePeriodInSecs sets the maximum age, in second... by katzr Path Finder in Deployment Architecture 11-04-2017 0 2	0	2
Custom Streaming Command Won't Distribute to Indexers (Python SDK, V2) I am writing a custom streaming search command using the Python SDK and the V2 Protocol. I followed the V2 protocol d... by kcnolan13 Communicator in Deployment Architecture 11-03-2017 2 9	2	9
Splunk Forwarder only sends a few Data from monitored logfile Greetings, I using a Splunk-Enterprice trail version and installed Forwarders on 3 different VMs. The Indexer Server... by toolanalyzer New Member in Deployment Architecture 11-03-2017 0 6	0	6
Why is bin command creating too many bins? Issue with 5-minute segments I have the same problem that is unanswered here I'm trying to do stats on the last 10 minutes of data by two separat... by FeatureCreeep Path Finder in Deployment Architecture 11-03-2017 0 4	0	4
Why is my search head missing in Distributed Management Console (DMC)? I'm sure this is going to be something simple. I have a small Splunk POC environment consisting of a cluster master,... by timmy13 Communicator in Deployment Architecture 11-03-2017 0 5	0	5
Forwarder won't stop forwarding A strange issue is happening, a few of our forwarders are sending a massive amount of data (wineventlog:security) to ... by mmoermans Path Finder in Deployment Architecture 11-03-2017 0 5	0	5
How do I "un-uninstall" a deployment server app? I was trying to remove an app from a serverclass and I clicked on Uninstall thinking that that would do it (there are... by woodcock Esteemed Legend in Deployment Architecture 11-02-2017 0 1	0	1
can i take $src_ip$ through1 index and use it other index in same query. If i have 1 index for firewall i can get src_ip and src_host which is creating some issues then i need to check that ... by rahul_acc_splun New Member in Deployment Architecture 11-02-2017 0 4	0	4
Changing the pass4SymmKey for Search Head Clustering not being encrypted in the Deployer We were having trouble with one of the Search Head cluster members. We went in to ensure that all of the shclustering... by sniderwj Explorer in Deployment Architecture 11-02-2017 0 1	0	1
Add cluster peer trying to reach wrong endpoint Hello I am using a NFR license. I am mounting a cluster environment in ubuntu, where my cluster master is on splunkd... by tiagofbmm Influencer in Deployment Architecture 11-02-2017 0 2	0	2
Changing mgmt port Hello I have a new Indexer instance of splunk with mgmt port 52400. Now if I put the Indexer peer configuration from ... by project9433 Engager in Deployment Architecture 11-02-2017 0 1	0	1
What is the best way to describe Deployment? I have gone through splunk docs it is like a puzzle for me to know about deployment. Can anyone give me perfect answe... by Rocky31 Path Finder in Deployment Architecture 11-01-2017 0 8	0	8
Disable search feature on Indexer Cluster Nodes Hi, I have configured SHC and Indexer cluster, Is there any way to disable search feature on Indexer cluster nodes, ... by rajeev_ku Path Finder in Deployment Architecture 11-01-2017 0 6	0	6
-bash: /opt/splunk/bin/splunk: No such file or directory When I try start splunk without sudo (or even logged in as root), I get a "no such file or directory" error. It works... by marcogallotta Explorer in Deployment Architecture 10-31-2017 1 2	1	2
Summary index does not meet my needs Hi. everyone.Please forgive my English level.I hope my description of the problem is clear enough.I have a lot of i... by xsstest Communicator in Deployment Architecture 10-31-2017 0 2	0	2