Deployment Architecture

Community Activity

How can I resolve this error I get from adding a new search head to my indexer clustering environment? After I added a new search head to my indexer cluster environment, I started getting "Error = 'Couldn't deserialize, ... by daniel_splunk Splunk Employee in Deployment Architecture 08-15-2017 0 1	0	1
Index Cluster Scaling Is there a limit for the number of nodes in an indexer cluster, above wich we will see a performance degradation? Wit... by FritzWittwer_ol Contributor in Deployment Architecture 08-15-2017 0 2	0	2
How to block a server from pushing data to our Splunk server We have a couple of unknown servers that push data to our Splunk serverI am not able to access these servers and not ... by edwinmae Path Finder in Deployment Architecture 08-14-2017 0 8	0	8
How to dynamically change the span parameter in bucket without using drop down options. I have a search like this: index=* source=*\|....\| bucket Time span=(1d/1h/5m)...\| if I select last one month from t... by karthikeyan_k14 New Member in Deployment Architecture 08-14-2017 0 3	0	3
Splunk log filtering via Splunk Heavy forwarder Hello, I have the the logs coming from our IPS coming in below format: Connection logs: Aug 10 08:54:44 HOST SFIMS:... by Sayanta_Basak_I Explorer in Deployment Architecture 08-14-2017 0 4	0	4
Scripted input not indexing fully Hi Team, I have deployed a scripted input on the Cluster Master which will gives us the last accessed, modified time... by siva_cg Path Finder in Deployment Architecture 08-14-2017 0 7	0	7
Why does a peer in an indexer cluster not have the "cluster_label" label? I have a clustered environment with many indexers, but for some reason one of the indexers are not playing nice with ... by bchau123 Engager in Deployment Architecture 08-10-2017 0 16	0	16
How do I change the owner of a saved search or view in a search head cluster environment? I need to change the owner of a search or dashboard view. Using the deployer merges changes from local.meta back to d... by rphillips_splk Splunk Employee in Deployment Architecture 08-10-2017 4 6	4	6
How do I determine the appropriate timeout value for distributed search I see timeouts with distributed search and currently have receiveTimeout set to 300. What metric(s) can I use to det... by matt Splunk Employee in Deployment Architecture 08-09-2017 2 3	2	3
Bucket number exceeds maxHotBuckets value Hi, In my splunk configurtation I have defined the maxHotBuckets to default value, so 3. When I monitor my indexers ... by osec2a New Member in Deployment Architecture 08-09-2017 0 9	0	9
Adding users via REST API on search head cluster Is it possible to add users via the Splunk REST API in a SH cluster? I thought that I had tested this but now when I... by brent_weaver Builder in Deployment Architecture 08-09-2017 1 1	1	1
How can I get the shc status from the deployer Hi, We have a SHC setup in our private cloud. So, picture servers going in/out/down/up... without the Splunk admin'... by a212830 Champion in Deployment Architecture 08-09-2017 0 2	0	2
How to forward sub-json object to splunk indexer My application writes log data to disk file. The log data is one-line json as below. I use the splunker-forwarder to ... by jeffreysun New Member in Deployment Architecture 08-08-2017 0 4	0	4
Splunk license master We have a distributed deployment of Splunk were we have to segregate Indexers between 2 different datacenters. One of... by Vonphenyl Engager in Deployment Architecture 08-08-2017 0 1	0	1
Is there any data transfer rates between search head and indexers? Just wanted to know is there any bandwidth rate for splunk search head to retrieve the logs from Indexers for search-... by sarwshai Communicator in Deployment Architecture 08-07-2017 0 3	0	3
Deployment error in distributed environment Hi, When I try to deploy Apps on my search head (distributed environment) I have this error : Error while creating ... by Naaba New Member in Deployment Architecture 08-07-2017 0 5	0	5
Forward all the data to another Splunk Instance Hello Guys, i need help to solve an issue. I have 1 Splunk Enteprise installation in one place, and another Splunk e... by mbarbaro Path Finder in Deployment Architecture 08-06-2017 0 3	0	3
Indexers cluster: Data synchronization after failure Hello, I am creating an indexer cluster (2 peers and replication factor=2) and I need to know: If one of the peers ... by noybin Communicator in Deployment Architecture 08-04-2017 0 2	0	2
How to properly configure and monitor index retention in an indexer cluster? We have moved to a new 3-Indexer environment with Index Replication from a 1-Indexer environment. We moved all of th... by aferone Builder in Deployment Architecture 08-04-2017 0 2	0	2
Windows Forwarder not collecting EventLogs I installed windows Universal forwarder on a host as a local user and updated outputs.conf with the Indexer details .... by saranya_fmr Communicator in Deployment Architecture 08-02-2017 0 1	0	1
Is there a way to get a complete list of all deployment clients without use web interface on a deployment server? I need to get a complete list of all deployment clients on my deployment server. I can't access to the web interface ... by danyx32 New Member in Deployment Architecture 08-02-2017 0 1	0	1
is it possible to build a cluster with the heterogeneous index I have a all-in-one Splunk box. As more team are pushing their logs into Splunk, the current Splunk box is going to r... by danielwan Explorer in Deployment Architecture 08-01-2017 0 4	0	4
Does bucket/bin command work from a lookup table/KVStore? I have a timestamp column, my_time, stored in my kvstore, my_kv. I wanted to generate a report, but I got "No result... by splunkrocks2014 Communicator in Deployment Architecture 08-01-2017 0 2	0	2
Removing a Host from Data Summary. Hi, I mistakenly uploaded the same data twice and now I want to remove 1 host as well as the data linked to host. Whe... by Shridhar7Hitesh Explorer in Deployment Architecture 08-01-2017 0 7	0	7
Multi-site clustering without replicating across sites? Here is the scenario - 2 Sites: Site 1 and Site 2Site 1 has 4 peers and indexes non-sensitive dataSite 2 has 2 peer... by pj Contributor in Deployment Architecture 07-31-2017 1 7	1	7