Deployment Architecture

Deployment Architecture
Community Activity
skippylou
Is there a way to have only certain indexes searchable when peer'ed with a particular search head? Example: Indexer...
by skippylou Communicator in Deployment Architecture 03-25-2016
1 3
1
3
lmcmipl
When the cluster peers are restarted, primary buckets are be re-assigned by the cluster master. Is there any way to s...
by lmcmipl Explorer in Deployment Architecture 03-24-2016
1 6
1
6
oasec1
Ran the : /opt/splunk/include/jre1.8.0_65/bin/keytool -list -v -keystore /opt/splunk/etc/apps/splunk_app_db_connect/...
by oasec1 Engager in Deployment Architecture 03-24-2016
1 1
1
1
jldebell
I set up the serverclass.conf with the whitelist using the host names and added the inputs.conf to monitor for the fi...
by jldebell Path Finder in Deployment Architecture 03-24-2016
0 1
0
1
ben_leung
WARN ConfMetrics - single_action=PULL_FROM took wallclock_ms=4610! Consider a lower value of conf_replication_max_pu...
by ben_leung Builder in Deployment Architecture 03-23-2016
1 3
1
3
shaileshmali
Hi I want to change deployment client setting to make sure phone home interval changes to 300s. Will these settings...
by shaileshmali Path Finder in Deployment Architecture 03-23-2016
0 1
0
1
jewettg
All.. I have inherited the task of learning about an older Splunk installation (4.1.5). It is working just fine, ho...
by jewettg Explorer in Deployment Architecture 03-23-2016
0 2
0
2
timcityspan
Configuration is controlled by deployment server -> deployment clients. How can a specific event (by event id, or ot...
by timcityspan Engager in Deployment Architecture 03-23-2016
0 3
0
3
transtrophe
In my situation, the default for maxresultrows is used in the limits merge (set to 50000) and the warning indicates 1...
by transtrophe Communicator in Deployment Architecture 03-22-2016
0 1
0
1
ahmar74
does anyone have an architecture plan that describes what is needed, etc for a large deployment?
by ahmar74 Explorer in Deployment Architecture 03-21-2016
0 3
0
3
immortalraghava
Hello all, I have a deployment server (license master) and an indexer cluster with 2 search heads. For now I have ad...
by immortalraghava Path Finder in Deployment Architecture 03-21-2016
1 2
1
2
a212830
Hi, I'm looking at the training material for the cluster admin course that I took, and for multi-site indexing, it s...
by a212830 Champion in Deployment Architecture 03-21-2016
0 11
0
11
lmcmipl
I would like to delete all the data in an index from an indexer cluster without restarting the indexers. Replicatio...
by lmcmipl Explorer in Deployment Architecture 03-18-2016
0 1
0
1
basher590
Hi, I have a cluster consisting of 2 indexers. At the weekend one of my indexers shut down unexpectedly and since th...
by basher590 Engager in Deployment Architecture 03-18-2016
0 1
0
1
gschmitz
Hi, I set up a couple of inputs on my cluster master and I do see it collecting data in the logs. However even after ...
by gschmitz Path Finder in Deployment Architecture 03-18-2016
1 4
1
4
a212830
As I prefer to upgrade to 6.3, I'm debating whether to use multi-site clustering. We don't currently replicate any d...
by a212830 Champion in Deployment Architecture 03-17-2016
0 5
0
5
a212830
Hi, I setup a dev SHC, and realized that my replication_factor was incorrect. How can I modify it?
by a212830 Champion in Deployment Architecture 03-17-2016
0 2
0
2
a212830
Hi, I'm setting up a pre-prod SHC and have some questions on best practices and such. My existing indexers are clus...
by a212830 Champion in Deployment Architecture 03-17-2016
0 3
0
3
stockwel
We would like to deploy intermediate forwarders in our environment. The IFs receive Windows Event logs from Universa...
by stockwel Engager in Deployment Architecture 03-16-2016
0 2
0
2
hemendralodhi
Hello, As per documentation Search Head queries Master to get list of peers and direct request to them and in case o...
by hemendralodhi Contributor in Deployment Architecture 03-16-2016
0 3
0
3
ryandg
So this is a bit of a convoluted situation so I will try to explain as best as possible. There are 2 Splunk environ...
by ryandg Communicator in Deployment Architecture 03-15-2016
0 7
0
7
DEAD_BEEF
I have a tool that generates three different alerts (alert1, alert 2, alert3). In these alerts, it records the user...
by DEAD_BEEF Builder in Deployment Architecture 03-15-2016
0 4
0
4
ostendrh
When upgrading from Splunk Enterprise 6.2.2 to 6.2.5, one no longer sees the license slave on the license master. Tr...
by ostendrh Engager in Deployment Architecture 03-14-2016
1 3
1
3
tlmayes
I have inherited what I believe to be an incomplete deployment of Splunk that I need to get my arms around. I am new...
by tlmayes Contributor in Deployment Architecture 03-14-2016
0 2
0
2
tapptress
For instance: Site A is main site and has the Master Node, along with a Search Head Cluster and Index Cluster. I want...
by tapptress Explorer in Deployment Architecture 03-12-2016
0 2
0
2
Get Updates on the Splunk Community!

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...