Deployment Architecture

Community Activity

Finding forwarders that are not reporting in but have in the past Hi guys, I've been been given 2 tasks with regards to our Splunk forwarders. 1) Find out which forwarders are not... by Robbie1194 Communicator in Deployment Architecture 07-10-2017 0 2	0	2
Does Splunk support two search head clusters with one indexer cluster? Does Splunk support two search head clusters with one indexer cluster? Basically we have 3 search heads clustered. we... by ankithreddy777 Contributor in Deployment Architecture 07-08-2017 1 3	1	3
Adding new SH cluster to existing splunk setup. Currently we have 1 multisite indexing cluster, 1 multisite search head cluster, a deployer and a master node. Planni... by sajeshpp Path Finder in Deployment Architecture 07-08-2017 0 2	0	2
How to calculate dispatch directory size in Splunk? Hi, I want to calculate dispatch directory size in Splunk to help in Splunk performance monitoring. Can anyone pleas... by MousumiChowdhur Contributor in Deployment Architecture 07-06-2017 0 1	0	1
Is it possible to bring new servers online into the respective pools and have them sync in such a way that we can remove the old servers one at a time? Would it be possible to bring the new servers online into the respective pools and have them sync in such a way that ... by trinity1571 New Member in Deployment Architecture 07-06-2017 0 3	0	3
How to configure Universal Forwarder to receive UDP traffic I am trying to forward events from my current SIEM to the Universal forwarder using UDP and port 9514. When I run a t... by pfabrizi Path Finder in Deployment Architecture 07-05-2017 0 7	0	7
Best practices to send multiple devices to a single indexer via syslog We have a deployment with approximately 500 linux systems that are sending logs via syslog on a single indexer. In so... by lightech1 Path Finder in Deployment Architecture 07-04-2017 0 6	0	6
Splunk performs tsidx reduction immediately on warm buckets I've recently upgraded to Splunk 6.6.0 and now seem to be having a problem with one of my indexes; every time I searc... by jmangs Explorer in Deployment Architecture 07-01-2017 2 4	2	4
script doesn't run. error Couldn't start command "" Resource temporarily unavailable I have a few sh scripts scheduled to run every few min and those stop recently, and print this error in the log. To w... by harry521 New Member in Deployment Architecture 07-01-2017 0 1	0	1
Deleting old Splunkd logs in Splunk forwarder Hi, Is there any configuration in Splunk forwarder to delete old splunkd logs, metric logs etc. by RAYUDU_NARA Explorer in Deployment Architecture 06-30-2017 0 2	0	2
Splunk forwarder configured with dummy splunk server results in long pause in puppet splunk restart I basically have roles which install the forwarder with whom I might wish to do some local testing. When testing loc... by davidheward New Member in Deployment Architecture 06-30-2017 0 3	0	3
Splunk 6.x and Linux? not so fast? New 6.0.x/6.1.x installation and both Indexer and Search Head seem to have latency and not performing as expected! C... by abonuccelli_spl Splunk Employee in Deployment Architecture 06-29-2017 2 9	2	9
Rotuing data to specific indexes I have situtationn where i have cluster master which managed the indexer cluster . I am getiing data in load balancin... by aab5272 Engager in Deployment Architecture 06-28-2017 0 4	0	4
How to check missing universal forwarders Any help will be appreciated, i trying from long back how to check missing forwarders. by Rocky31 Path Finder in Deployment Architecture 06-28-2017 0 5	0	5
Splunk Db Connect with Forwaders We want to ingest data from databases to our indexer .Would it be recommended to use heavy forwarder or UF ? Also can... by aab5272 Engager in Deployment Architecture 06-27-2017 0 1	0	1
Cluster bucket rebalancing: How long is too long? My first few attempts at rebalancing were pretty great. No muss, no fuss. They ran for about 12 hours and like magic ... by twinspop Influencer in Deployment Architecture 06-26-2017 0 8	0	8
Forwarder issue So we are trying to design a solution and we want two layers for forwarding . At the first layer universal forwarder ... by aab5272 Engager in Deployment Architecture 06-26-2017 0 4	0	4
Apps: To Disable or To Delete? I'm setting up a deployment server. From what I understand, the deployment server only adds or updates app files and... by oreoshake Communicator in Deployment Architecture 06-26-2017 3 3	3	3
Splunk replication factor and search factor modifications If I increase my replication factor or the search factor. Does this changes are applicable to old buckets? suppose I... by ankithreddy777 Contributor in Deployment Architecture 06-25-2017 0 1	0	1
How to app check deployment status Hi everybody I have a challenge I must to deal with. I would like to create a script to deploy application from en t... by pmerlin1 Path Finder in Deployment Architecture 06-24-2017 0 2	0	2
I have to connect Splunk cloud to a mongoDB instance running on AWS. What is the best way to do this? It seems like Hunk cannot be used since it is only available for Splunk Enterprise. Any work around for that? As for ... by nisha_kapoor Path Finder in Deployment Architecture 06-24-2017 0 1	0	1
HTTP Event Collector through Deployment Server I followed the instructions on this page for scenario 3 - http://dev.splunk.com/view/event-collector/SP-CAAAE73#scen3... by sk314 Builder in Deployment Architecture 06-23-2017 0 3	0	3
architecture to support a single-site index in a multisite indexing cluster? Hello Splunk Gurus, I have a multisite indexing cluster in Splunk 6.6.1 spanning two sites: small & big. The "big/s... by gedworksplunk Engager in Deployment Architecture 06-23-2017 0 2	0	2
Impact of shutting down some splunk roles for a day? I have a 5 node indexer cluster and a 3 node SHC which are all physical servers, but the rest are VMs (Deployment ser... by jdmclemore Path Finder in Deployment Architecture 06-23-2017 0 2	0	2
Splunkforwarder stopped sending data randomly Hey Guys! So I have 2 forwarders they had stopped sending current data, I looked over the splunk config with a splun... by qfulgham New Member in Deployment Architecture 06-22-2017 0 1	0	1