Deployment Architecture

Deployment Architecture
Community Activity
glentes
Hi guys, we are running a splunk enterprise infrastructure with heavy forwarder, search head and index cluster on ve...
by glentes Path Finder in Deployment Architecture 08-03-2016
0 1
0
1
lst1017
I have a Splunk indexer cluster (2 indexers, 1 master node), 1 search head, and multiple forwarders. Is there a way t...
by lst1017 New Member in Deployment Architecture 08-02-2016
0 1
0
1
bandit
Any details on how to attempt to cluster legacy data even though it's not recommended? http://docs.splunk.com/Docume...
by bandit Motivator in Deployment Architecture 08-02-2016
2 3
2
3
jcarpio9
Hello all: Need to remove a peer from cluster due to sync errors. Then re-add to sync up correctly (per support). ...
by jcarpio9 Engager in Deployment Architecture 08-02-2016
0 2
0
2
transtrophe
I am new to Splunk and trying to troubleshoot the "splunk newbies" dreaded "Search peer 'xxx' has the following messa...
by transtrophe Communicator in Deployment Architecture 08-02-2016
1 20
1
20
ektasiwani
Hi , I have an external app where I am fetching data from Splunk and displaying a graph using the JavaScript SDK. No...
by ektasiwani Communicator in Deployment Architecture 08-02-2016
0 2
0
2
sat94541
In Search Head Cluster environment Unable to share Tag created from Event Actions>Action . On the other hand Tag cr...
by sat94541 Communicator in Deployment Architecture 08-01-2016
0 1
0
1
brdr
Hi Support, I'm configuring Distributed Management Console. The DMC will reside on cluster master. I've added indexe...
by brdr Contributor in Deployment Architecture 08-01-2016
0 2
0
2
rakesh_498115
Hi Team. I have my indexers present in 2 sites , site1 and site2. In site1 i have 5 indexers servers and in site2 i ...
by rakesh_498115 Motivator in Deployment Architecture 08-01-2016
0 2
0
2
twinspop
Our splunk install has a (new) Search Head Cluster. Previously we were running Search Head Pooling. I'm struggling to...
by twinspop Influencer in Deployment Architecture 07-30-2016
1 6
1
6
lorenh
The instructions say to create directories on the deployment server, but I don't have access to the deployment server...
by lorenh Explorer in Deployment Architecture 07-29-2016
0 14
0
14
jorgefg
Hi folks, When I click on "Settings -> Data inputs" I'm getting "500 Internal Server Error". The log file $SPLUNK_H...
by jorgefg Explorer in Deployment Architecture 07-29-2016
1 2
1
2
fatemabwudel
Hi, A little background regarding my question: I have a cluster of three indexers with 4 NICs each. I have a working...
by fatemabwudel Path Finder in Deployment Architecture 07-28-2016
0 2
0
2
AzmathShaik
Hello, i need to distribute outputs.conf file to my forwarder using deployment server. i have set up deployment serv...
by AzmathShaik Path Finder in Deployment Architecture 07-27-2016
0 3
0
3
sspomeplus
Hello, About the next subject, someone has any opinion: Splunk GUI > Manager » Distributed search » Search peers Wh...
by sspomeplus New Member in Deployment Architecture 07-27-2016
0 1
0
1
RJ_Grayson
Some additional information about the environment: All indexers are running Splunk 6.3.5. The indexers are all cluste...
by RJ_Grayson Path Finder in Deployment Architecture 07-27-2016
0 3
0
3
horsefez
Hi fellow splunkers, I'm currently setting up a SH-cluster. I have an indexer-cluster with 2 indexers. One master ...
by horsefez Motivator in Deployment Architecture 07-27-2016
1 4
1
4
kaskirana01
Hi, I have raw unix logs and I have to create an use case to find the schedules task created by the users. I f I sear...
by kaskirana01 New Member in Deployment Architecture 07-26-2016
0 2
0
2
ameslet
Hi guys, I have the following issue, I have copied the whole $SPLUNK_HOME directory from my old Splunk instance to b...
by ameslet Explorer in Deployment Architecture 07-26-2016
0 2
0
2
svishnevskaya_s
In an indexer clustering environment is there a way to push out new ca.pem and cacert.pem files from the cluster mast...
by svishnevskaya_s Splunk Employee Splunk Employee in Deployment Architecture 07-26-2016
0 2
0
2
RJ_Grayson
I haven't been able to find a definitive answer anywhere in the Splunk documentation and I'm curious what the officia...
by RJ_Grayson Path Finder in Deployment Architecture 07-26-2016
0 2
0
2
gcusello
Hi at all, I found a strange behavior of my Splunk instance or maybe it's only my low Splunk knowledge!. I have a Uni...
by SplunkTrust SplunkTrust in Deployment Architecture 07-26-2016
0 3
0
3
dmr1
I apologize for what I think is probably going to end up being a pretty dumb question, but I don't have a lot of expe...
by dmr1 Engager in Deployment Architecture 07-25-2016
0 3
0
3
brdr
Hi Splunk, We will be using rsync to keep our 2 enterprise search heads in sync. I found a Splunk wiki page on this...
by brdr Contributor in Deployment Architecture 07-25-2016
1 14
1
14
CaptainHook
We have a serverclass set up to ingest WinEventLog:Security logs for multiple servers (contains a blacklist for accou...
by CaptainHook Communicator in Deployment Architecture 07-25-2016
0 5
0
5
Get Updates on the Splunk Community!

Break the Build: Inside the KubeDoom Lounge at .conf26

    You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...