Deployment Architecture

Deployment Architecture
Community Activity
shahzadarif
I've had Splunk 6.2.1 running for a while and Search Heads were accessible from Apache proxy and this is how it is co...
by shahzadarif Path Finder in Deployment Architecture 03-01-2016
0 2
0
2
dturner83
We've got a 3 indexer - 3 search head setup on 6.2.4 using indexer clustering, search head clustering, and a deployer...
by dturner83 Path Finder in Deployment Architecture 02-29-2016
1 15
1
15
arns
Hello, I'd like to know why when we initiate a rolling restart of the indexer cluster, we see a lot of bucket fix up...
by arns New Member in Deployment Architecture 02-29-2016
0 3
0
3
dsepulveda
Hello, My name is Daniel, i am evaluating Splunk to be used as a part of a SOC but i haven't been able to configure ...
by dsepulveda New Member in Deployment Architecture 02-26-2016
0 4
0
4
javiergn
Hi all, Assuming a worst case scenario: almost all my data is gone because a monkey misconfigured the index retentio...
by javiergn Super Champion in Deployment Architecture 02-26-2016
1 12
1
12
rphillips_splk
In search head clustering you use a deployer instance to push apps to the search head cluster members using the comma...
by rphillips_splk Splunk Employee Splunk Employee in Deployment Architecture 02-26-2016
0 5
0
5
jreuter_splunk
I just installed some new apps (updated some as well) on my Splunk indexer cluster and attempted to push the bundle. ...
by jreuter_splunk Splunk Employee Splunk Employee in Deployment Architecture 02-25-2016
3 2
3
2
miront
If I have an accelerated data model (example_datamodel) on Search-Head-A and all of that data is being stored on clus...
by miront Explorer in Deployment Architecture 02-25-2016
1 1
1
1
davebo1896
I'm trying to run a script from an app as an alert action. The script is in $SPLUNK_HOME/etc/apps/foo/bin/scripts/bar...
by davebo1896 Communicator in Deployment Architecture 02-24-2016
0 3
0
3
earakam
Hi , I was wondering, whether there will be any effect on Splunk when the host is restarted suddenly while splunk se...
by earakam Path Finder in Deployment Architecture 02-23-2016
0 7
0
7
tungntran
Hi All, I was able to get counteract module to forward data using "web_event" sourcetype. However, all the data res...
by tungntran Explorer in Deployment Architecture 02-22-2016
0 1
0
1
tkwaller
Hello We have a large search head cluster that we saw the count of data spike on. Turns out, there's an issue with t...
by tkwaller Builder in Deployment Architecture 02-22-2016
0 1
0
1
kpavan
Hi All, I have configured a deployment server and clients and I can see clients in the deployment server. Below are...
by kpavan Path Finder in Deployment Architecture 02-22-2016
0 1
0
1
lycollicott
I have this in server.conf on my search heads: [general] pass4SymmKey = $$$$$$$$$$$$$$$$$ serverName = xxx-xxxxxxxx ...
by lycollicott Motivator in Deployment Architecture 02-22-2016
0 3
0
3
photuris
Ok, y'all, I'm in bit of a pickle, and I need a little help out of this conundrum. So I'm using DB Connect (dbx/dbmo...
by photuris Explorer in Deployment Architecture 02-22-2016
2 6
2
6
ashnet16_2
Hello, When trying to remove all excess buckets via the Cluster Master in a multisite indexer clustered environment,...
by ashnet16_2 New Member in Deployment Architecture 02-21-2016
0 1
0
1
paulnshelly_200
I have three search heads in a search head cluster and they are all listed in my Distributed Management Console as se...
by paulnshelly_200 Explorer in Deployment Architecture 02-19-2016
0 2
0
2
tiny3001
Hi everyone, I have a stand-alone deployment server setup on a CentOS 7 Linux VM with 8 cores and 8GB RAM on Splunk ...
by tiny3001 Path Finder in Deployment Architecture 02-18-2016
0 5
0
5
erinboudreau
We are upgrading our deployer and search heads from version 6.2.0 to 6.2.8. Will they be compatible with the existing...
by erinboudreau Explorer in Deployment Architecture 02-18-2016
0 1
0
1
gduggan1
I have a multisite indexer clustering environment with 2 Indexers in Site1 and 1 Indexer in Site2. What is the recomm...
by gduggan1 Path Finder in Deployment Architecture 02-18-2016
1 1
1
1
ashnet16_2
Hello, Currently we have a multisite cluster that has two sites. Using the Rest endpoint, we put 33% of our peers i...
by ashnet16_2 New Member in Deployment Architecture 02-18-2016
0 1
0
1
gfreitas
Dear Splunkers, We have a multisite Indexer Cluster in our datacenter and some remote locations with local standalon...
by gfreitas Builder in Deployment Architecture 02-18-2016
0 3
0
3
vanderaj1
Hi Splunkers! I recently inherited responsibility for a Splunk Indexer and I'm not so sure that the disks,data backu...
by vanderaj1 Path Finder in Deployment Architecture 02-16-2016
0 6
0
6
quaestorit
First of all, sorry for my english. When Splunk deployment server (6.1.4 version) updates apps on deployment clients...
by quaestorit New Member in Deployment Architecture 02-16-2016
0 5
0
5
splunkvickyloui
Hi, Our splunk setup stores the indexed data under /data02/tools/splunkdb/prod_vicky_app. We keep only 30 days of da...
by splunkvickyloui Explorer in Deployment Architecture 02-16-2016
0 3
0
3
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...
Top Solution Authors