Deployment Architecture

Deployment Architecture
Community Activity
karthik_r
Hello Team,Can anyone please help me out to clarify the following query and a better approach for deploying the Obser...
by karthik_r Observer in Deployment Architecture 03-18-2024
0 0
0
0
VK18
Hi All,I currently have a primary standalone Enterprise Security (ES) search head located in the main data center. Ev...
by VK18 Explorer in Deployment Architecture 03-18-2024
0 4
0
4
skiransecops
I was recently working on Splunk Enterprise security to have a forwarder installed on the Linux machine and display i...
by skiransecops Loves-to-Learn Lots in Deployment Architecture 03-18-2024
0 2
0
2
ChaoticMike
Hello everyone, I have a need to increase the compute capacity of an HF running in AWS (it is only forwarding, not in...
by ChaoticMike Explorer in Deployment Architecture 03-14-2024
0 5
0
5
ahadghani
We are receiving messages about how our indexers (distributed environment) doesn't meet the minimum system requiremen...
by ahadghani Engager in Deployment Architecture 03-14-2024
0 2
0
2
michael_vi
Hi,We have 3 indexers and 1 search head (replication factor = 3).I need to permanently remove one indexer What is the...
by michael_vi Path Finder in Deployment Architecture 03-13-2024
0 1
0
1
makelovenotwar
I would like to allow list a url from my dashboards so that no more redirection warnings pop up.  Per the documentati...
by makelovenotwar Path Finder in Deployment Architecture 03-13-2024
0 3
0
3
rickymckenzie10
Hello, how can I ensure the data being sent to cool_index is rolled to cold when the data is 120 days old?The config ...
by rickymckenzie10 Explorer in Deployment Architecture 03-13-2024
0 2
0
2
ethammis
I have windows service called "ess". Due to network glitch the service is entering into stopped state and start state...
by ethammis Engager in Deployment Architecture 03-11-2024
0 3
0
3
himaniarora20
Hi Team,We have a search head cluster and indexer cluster in our current Splunk environment.  The data to the indexer...
by himaniarora20 Explorer in Deployment Architecture 03-06-2024
0 5
0
5
ryanaa
 "I want to deploy my settings to another search head while using a virtual machine. However, whenever I attempt to a...
by ryanaa Explorer in Deployment Architecture 03-06-2024
0 3
0
3
kate
Installed Splunk Add-on for Unix and Linux 9.0.0 not getting memory data for ubuntu server?Checks performed1) Getting...
by kate Path Finder in Deployment Architecture 03-04-2024
0 1
0
1
rickymckenzie10
Currently, each of my indexes is set to a specific and own frozenTimePeriodInSecs, but I am noticing they are not rol...
by rickymckenzie10 Explorer in Deployment Architecture 02-28-2024
0 3
0
3
kate
Which version of Universal Forwarder for ubuntu (debian 64 bit) is compatible with to splunk cloud verison 9.1.2308.2...
by kate Path Finder in Deployment Architecture 02-28-2024
0 2
0
2
thaghost99
here is the current data Feb 27 14:12:38node0:-----------------------------------------------------------------------...
by thaghost99 Path Finder in Deployment Architecture 02-28-2024
0 2
0
2
Ka21
Hi We are facing below error while Run the search in search head. This is coming frequently and unable to solve it.We...
by Ka21 Loves-to-Learn in Deployment Architecture 02-26-2024
0 0
0
0
acavenago
   Hello,I have a multi-site cluster at version 9.0.1, with several Indexers, SHs, and HF/UFs.The Monitoring Console ...
by acavenago Explorer in Deployment Architecture 02-26-2024
0 3
0
3
eregon
Hello fellow Splunkthusiasts!TL;DR: Is there any way to connect one indexer cluster to two distinct license servers? ...
by eregon Path Finder in Deployment Architecture 02-22-2024
0 1
0
1
SN1368
helloafter I upgraded Splunk to the 9.1.1 version, some parts of the overview page in the distributed monitoring cons...
by SN1368 Observer in Deployment Architecture 02-19-2024
0 9
0
9
AMAN0113
We are planning to migrate a server that plays multiple roles as a DS, HEC, Proxy, SC4S, Syslog etc., to multiple ser...
by AMAN0113 Explorer in Deployment Architecture 02-19-2024
0 1
0
1
m_zandinia
Hi SplunkersCurrently, I have 8 indexers and about 100 indexes! Here is a sample of my indexes.conf: # volumes [volum...
by m_zandinia Path Finder in Deployment Architecture 02-18-2024
0 3
0
3
dokaas_2
In an multi-site cluster Splunk replicates the data to the remote site, but doe Splunk also replicate the index infor...
by dokaas_2 Communicator in Deployment Architecture 02-17-2024
0 8
0
8
Mad2
need to install the splunk enterprise and wanted to make SH and indexer , universal forwarder  same system , please a...
by Mad2 Observer in Deployment Architecture 02-16-2024
0 3
0
3
paecon
Having trouble finding an answer for this one but is it possible to change just the cold database location to a NAS f...
by paecon New Member in Deployment Architecture 02-16-2024
0 3
0
3
pcsegal1
Hi, I have a legacy Splunk Enterprise cluster that consists of: 1 cluster master3 indexers, forming an indexer cluste...
by pcsegal1 Explorer in Deployment Architecture 02-14-2024
0 14
0
14
Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Note: This post outlines a proposed architecture and serves as an interest check. If we secure commitments ...