Deployment Architecture

Community Activity

Replication Factor and Search Factor is never met on Cluster Master I have a Cluster Master with two Cluster Peer, with the Replication Factor=3 Search Factor=2 Due to some reason, t... by rbal_splunk Splunk Employee in Deployment Architecture 04-10-2017 1 3	1	3
procedure to perform non-rolling upgrade a (Windows) Search Head Cluster - problem with service auto-restart Hello, I have a 3-node (Windows 2012 R2 based) Search Head Cluster currently connected to a standalone indexer. I w... by sylbaea Communicator in Deployment Architecture 04-10-2017 0 2	0	2
Recommendations to load large amounts of data from SPLUNK to ORACLE? Hi, We need to export from SPLUNK and load into ORACLE large amount of data (IIS logs ). About 30 mil records per day... by leo_y Explorer in Deployment Architecture 04-10-2017 1 11	1	11
Why are we seeing slow performance of the Search app and error "Failed to fetch rest endpoint..." in our search head cluster? Three Splunk 6.3 search heads + 1 6.3 deployer/deployment-server & license server + 2 6.3 indexers. Has been up for 4... by banderson7 Communicator in Deployment Architecture 04-10-2017 0 5	0	5
splunk validate cluster-bundle fails with "no spec file" but spec exists Hi! Why on splunk validate cluster-bundle do I get these errors: No spec file for: /opt/splunk/etc/master-apps/SA-... by droth333 Explorer in Deployment Architecture 04-07-2017 0 1	0	1
Adding a Input (Folder) to Forwarder i was trying to add a folder to forwarder to read data but its giving me an error ..as your session is invalid. pleas... by raghu0463 Explorer in Deployment Architecture 04-07-2017 0 17	0	17
Does collect command remove data from source index? Does collect command remove data from source index? by itmonitoring Explorer in Deployment Architecture 04-06-2017 0 3	0	3
Splunk behind a reverse proxy refuses to stay on https This is a problem I've been battling with for ages, and I feel like I've looked at every related splunk>answers post,... by bobbycrispbox Explorer in Deployment Architecture 04-06-2017 2 7	2	7
How to move indexed data from one index to other in a Linux Splunk server? We already indexed 3 months data in an index named "X" and now we need to move this indexed data to another existing ... by pavanae Builder in Deployment Architecture 04-06-2017 0 2	0	2
Splunk forwarder need to restart when new app with inputs.conf added? Does Splunk UF need to restart when new app consisting inputs.conf is added? While setting serverclass.conf should I... by ankithreddy777 Contributor in Deployment Architecture 04-06-2017 0 2	0	2
How to know whether Forwarders is sending data or not, in splunk?? Hi, I'm trying to write a query to see whether a Splunk agent status(forwarders) is running or stopped(forcefully st... by Kirantcs Path Finder in Deployment Architecture 04-06-2017 0 1	0	1
data masking not working this is the log file bash-4.2$ more mask.log .( static log file for testing. added it via input file monitoring from... by Prakhar_shukla Path Finder in Deployment Architecture 04-05-2017 0 5	0	5
Adjust ES Urgency based on Risk I have ES, and I love the Risk Framework for understanding holistic risk for my users and systems. And I can sort the... by David Splunk Employee in Deployment Architecture 04-05-2017 0 2	0	2
Why does my SH Cluster set with a static captain show members with mgmt_uri = ? When my SearchHead Cluster is set with a static captain, why does the ./splunk show shcluster-status command return a... by tnerpel_splunk Splunk Employee in Deployment Architecture 04-05-2017 2 1	2	1
Volume capacity Hi, Is there a way I can see what is happening whine my volumes reach 100% capacity - they are purging data, I want ... by mwdbhyat Builder in Deployment Architecture 04-05-2017 0 5	0	5
how much is the time difference between current and and next data pull time via MS Cloud Services addon how much is the time difference between current and and next data pull time via MS Cloud Services addon\ When I am t... by vikram_m Path Finder in Deployment Architecture 04-05-2017 0 1	0	1
Search head cluster cluster rolling restart issue Hi, I am having an issue with my SH cluster.. Was working fine, now there are no members. Captain is elected dynamic... by mwdbhyat Builder in Deployment Architecture 04-05-2017 0 3	0	3
size of batches Once a day we drop 20k files into a batch directory for processing. It can take 2-3 hours for all of the files to be... by MarkRichardsNH New Member in Deployment Architecture 04-04-2017 0 2	0	2
Resolving missing logs when my connections and configs seems fine. Hi All, We have missing logs from a DHCP server that has a splunk forwarder installed, the network connectivity is f... by dantimola Communicator in Deployment Architecture 04-04-2017 0 3	0	3
DR deployer storage setup Do we need to use the shared storage for Deployer and DR Deployer. Is there any better solution to sync data between... by ankithreddy777 Contributor in Deployment Architecture 04-03-2017 1 1	1	1
SPlunk agent deploymenton SAP Servers We need to deploy Splunk agents on 400 SAP Servers, Is there any script which we can deploy and agents install automa... by sahils New Member in Deployment Architecture 04-03-2017 0 2	0	2
Can Search head members and deployer run on same lb Can the deployer and search head cluster members run on the same load balancer? I have a load balancer and the pool m... by dhawal_sanghvi New Member in Deployment Architecture 04-03-2017 0 3	0	3
send data from heavy forwarder to peer index Hello, I need to send specify log file data from HF to a specify index on peer. bash-4.2$ more inputs.conf [monitor... by Prakhar_shukla Path Finder in Deployment Architecture 04-02-2017 0 5	0	5
Event sent to null queues I have merged several lines in to one event using Should_linemerge=true. Now event looks like abc bcd cde efg I wan... by ankithreddy777 Contributor in Deployment Architecture 03-31-2017 0 2	0	2
Setting outputs.conf I have a doubt here..I want to index data to both sandbox and production. What changes do I need to make here. [tcpo... by rangineniarunku Explorer in Deployment Architecture 03-31-2017 0 1	0	1