Deployment Architecture

Community Activity

Replacing search peer in an indexer cluster - Best practices/concerns Hi Splunk experts, We have a 2 site index cluster with 2 indexers per site. The plan is to replace existing disks o... by datlaphani New Member in Deployment Architecture 09-20-2017 0 2	0	2
Determine host of the searchhead running a SPL hi, we have savedsearches running on Search Heads and need to trigger different alerts based on the environment. The ... by koshyk Super Champion in Deployment Architecture 09-18-2017 0 5	0	5
Are all indexes replicated in Indexer cluster? I am currenly running a 2 system indexing cluster on Windows VMs. One of the systems is experiencing poor performanc... by scottrunyon Contributor in Deployment Architecture 09-18-2017 0 10	0	10
What should be the homePath.maxDataSizeMB in relation to the maxDataSize? Hello - I am getting the following warning: "IndexConfig - Home path size limit cannot accomodate maximum number o... by maira New Member in Deployment Architecture 09-15-2017 0 3	0	3
How to switch between active/inactive forwarders when you have a cluster? Hi, When you have a Splunk forwarder on a server using Cluster (Active/Inactive), what can you do to Stop the Splunk... by geantver0000 Engager in Deployment Architecture 09-15-2017 0 4	0	4
Problem accessing the indexes from the indexer with one master and one search head Hello, So, I'm trying to produce the following topology where I have one master/search head and one separate indexer... by negast New Member in Deployment Architecture 09-15-2017 0 1	0	1
Can a search head cluster be implemented without integrating with deployer? I have a standalone search head connected to only one search peer. Now I am introducing another search head to the en... by jet1276 Path Finder in Deployment Architecture 09-13-2017 0 5	0	5
Why does my search peer come up as an error on my search head? I've added a search head as a search peer and it's come up as "sick" with the following error. Can't seem to find an... by timmy13 Communicator in Deployment Architecture 09-12-2017 1 4	1	4
Push apps from deployment server automatically to universal forwarders when they connect I have an app created and deployment client created. I need to push the app automatically to the UFs which are conne... by vikram_m Path Finder in Deployment Architecture 09-12-2017 0 3	0	3
Various problems with bundle replication; unauthorized and generic error Running a 2 site indexer cluster configuration, with 2 search head clusters. Site 1 shows a search head with the fol... by manderson7 Contributor in Deployment Architecture 09-10-2017 0 2	0	2
Migrating deployment server - check my work please :) Hi all; I have to decomission our current deployment server (forwarder configs) and was hoping to get an extra set o... by paimonsoror Builder in Deployment Architecture 09-08-2017 1 7	1	7
Unable to manipulate serverclass whitelist via REST We're trying to script some whitelisting of hosts in serverclasses, hit a snag. We create a test serverclass named '... by wegscd Contributor in Deployment Architecture 09-07-2017 0 2	0	2
How do I remove a search head from an Indexer Cluster using CLI (without using cluster master restart)? I am automating removing a search head (SH) instance from both the search head cluster and the index cluster. Removi... by jamesoconnell Path Finder in Deployment Architecture 09-07-2017 0 4	0	4
Splunk ODBC SSL connect error I am trying to connect to Splunk Enterprise using Splunk ODBC app following the documentation http://docs.splunk.com/... by KomalSharma Explorer in Deployment Architecture 09-07-2017 0 1	0	1
Settings to auto-restart Splunk? 1) How to auto restart Splunk. 2) How to upgrade Splunk 6.5 to the latest version. we currently have 325 GB license.... by Rocky31 Path Finder in Deployment Architecture 09-07-2017 1 4	1	4
How to see Internal logs which are sent from Search Head to Indexer? I followed the steps mentioned on below link to send internal logs from SH to indexer. http://docs.splunk.com/Docume... by varad_joshi Communicator in Deployment Architecture 09-07-2017 0 11	0	11
Departmental architecture setup for 100+ concurrent users or searches? Hi, I want to setup departmental architecture because we are getting daily data volume is 1 GB/day. As per the splu... by raghu_vedic Path Finder in Deployment Architecture 09-07-2017 0 2	0	2
Do I even need cold storage if I am using the same disk? All, Is there any value or having cold storage for my indexes if I am using the same disk? Why not leave everything... by daniel333 Builder in Deployment Architecture 09-06-2017 0 3	0	3
How to search for all components of a Splunk deployment Hi, I am new to Splunk and would like to start using Splunk on my firm's applications monitoring. Please let me know ... by nikitakapoor New Member in Deployment Architecture 09-06-2017 0 2	0	2
How can I calculate log transfer traffic from a particular host? How to check event log size in MB of particular host in index? calculate log transfer traffic from particular host to... by aparkale New Member in Deployment Architecture 09-06-2017 0 6	0	6
How do I make changes to server.conf? I need to make some changes and Splunk proServe tells me that I can use the deployment server to make this change. Ho... by brent_weaver Builder in Deployment Architecture 09-05-2017 0 5	0	5
Why am I receiving "ERROR S2SFileReceiver - event=statSize replicationType=eJournalReplication...status=failed" in splunkd on my indexer cluster? Hi, I am receiving the above error ERROR S2SFileReceiver - event=statSize replicationType=eJournalReplication...stat... by mwdbhyat Builder in Deployment Architecture 09-04-2017 0 3	0	3
Time Bucket Displayed Hi, is there anyway I can display what time bucket has been applied when displaying single values? My users would lik... by robettinger Explorer in Deployment Architecture 09-04-2017 0 13	0	13
Help setting up a search head cluster? New to Splunk, can anyone help me build a SH Cluster? Any videos would be great, I tried reading the tutorials on Spl... by bofa123 New Member in Deployment Architecture 09-02-2017 0 1	0	1
How can I migrate users' existing knowledge objects within their own user directories to a search head cluster so they can delete them via the gui? I've encountered an issue when migrating from a search head pool to a cluster. Users are unable to delete their own o... by Lucas_K Motivator in Deployment Architecture 09-01-2017 0 1	0	1