Deployment Architecture

Community Activity

Deployment Server \| Clustered environment 10.2.x IHAC that has a distributed DS/LM/MC in a DMZ environment (see image). It's a new RHEL build on 10.2.2 and clients ha... by NullZero Communicator in Deployment Architecture 04-24-2026 0 2	0	2
Agent management page is not loading Hello,I can't load Agent management page in UI on Deployment server. I installed Splunk version 10.2.1 then upgraded... by Styfe Engager in Deployment Architecture 04-22-2026 0 3	0	3
What are the steps to decommission half of the indexers in my environment? We have ten indexers in our environment with a replication factor of two, and search factor of one, and I would like ... by LovingSplunk Path Finder in Deployment Architecture 04-22-2026 1 2	1	2
Splunk HA is not working when Secondary License manager server is active we have below setupSite 1- Search Head, Indexer, Cluster master & License MasterSite 2: Search Head, Indexer, Cluster... by malisushil119 Explorer in Deployment Architecture 04-21-2026 0 9	0	9
load balancer Is there any documentation in Splunk's documentation to guide a load balancer administrator on configuring the load b... by hazem Path Finder in Deployment Architecture 04-21-2026 0 19	0	19
Why am I getting "Missing enough suitable candidates to create a replicated copy" building a multisite indexer cluster staging environment? Hello, I have built a Splunk testing / staging environment on top of 6 VMs. Splunk version is 6.2.3 and us running on... by harrymclaren Explorer in Deployment Architecture 04-20-2026 0 23	0	23
Splunk UF fail to install on Windows Server Hi All, I’m facing an issue while installing the Splunk Universal Forwarder on my Windows server using the MSI comman... by HexalNull Engager in Deployment Architecture 04-17-2026 0 13	0	13
How can I remediate this OpenSSL vulnerability? We have this vulnerability on several forwarders -OpenSSL 1.0.2 < 1.0.2zn Multiple Vulnerabilities(https://www.tenabl... by LovingSplunk Path Finder in Deployment Architecture 04-07-2026 0 1	0	1
List Universal fowarders disconnected from the Deployment Server Hi All,I am trying to list out all the universal forwarders which are currently not connected/disconnected with the d... by manchou0709 Explorer in Deployment Architecture 03-30-2026 0 15	0	15
will mix of FIPS and non FIPS servers still work? (not sure what forum location/message board to use)I currently have a non FIPS - RHEL 8 Single Site Distributed Clust... by Darthsplunker Path Finder in Deployment Architecture 03-26-2026 0 4	0	4
Indexing Huawei Firewall device logs into Splunk Hi,I am trying to ingest huawei USG6650 device logs but it seems that no app is available in splunk base for this pur... by eidil Explorer in Deployment Architecture 03-26-2026 1 6	1	6
Evaluation Setup for Spunk ES Questions - All components under one Windows VM Hi, I'm gathering requirements for an evaluation setup for Splunk platform with Enterprise Security.Would it be possi... by acisac Explorer in Deployment Architecture 03-26-2026 0 7	0	7
Splunk 10.2.x \| RHEL 8 \| SPL2 disable or exposure IHAC that is eager to take advantage of the new Splunk Enterprise 10.2 release, they are currently on 10.0.3 and have... by NullZero Communicator in Deployment Architecture 03-25-2026 0 2	0	2
Add Data - only default indexes I have a distributed deployment with a SHC and a IC. I have added the index to the manager and pushed the new index ... by detrue New Member in Deployment Architecture 03-22-2026 0 2	0	2
Can we downsize our indexer cluster? We are at 10 indexers ingesting around 400 GBs/day. A homogeneous environment with 1 millisecond wait time (I/O Write... by LovingSplunk Path Finder in Deployment Architecture 03-20-2026 0 12	0	12
How do I clear old indexers' bundles? On my indexers I have many bundles that are very old (some over 1 year old). What is the best way to configure Splunk... by LovingSplunk Path Finder in Deployment Architecture 03-13-2026 0 3	0	3
Change Universal Forwarder host/servername Hi,I work with a distributed Splunk Enterprise architecture and I am trying to update how some Universal Forwarder sh... by prusconi New Member in Deployment Architecture 03-11-2026 0 1	0	1
Cisco Enhanced Netflow Add-On Insanity Hello guys,I am currently banging my head on the wall trying to understand and deploy the "Cisco Catalyst Enhanced Ne... by lbertini New Member in Deployment Architecture 03-09-2026 0 0	0	0
How come the license master is configured as a search peer to the search head? I get this vulnerability log from the search head -/opt/splunk/var/run/searchpeers/<license-master-hostname>-17710294... by LovingSplunk Path Finder in Deployment Architecture 03-05-2026 0 4	0	4
Splunk on ARM Macs: status of KV store support? Hi all, I'm currently running arm64 version of Splunk on my M4 Mac mini, and I noticed KV store isn't available. Digg... by i0ntempest Loves-to-Learn in Deployment Architecture 03-02-2026 0 1	0	1
Heavy Forwarders not showing in Agent Management on Deployment Server I'm running Version 10.2.0, Build: d749cb17ea65 -- on RHEL 10 as a Systemd serviceI've registered 2 Heavy Forwarders... by salc Explorer in Deployment Architecture 02-26-2026 0 4	0	4
edge processor service account Hi,First time Setup of the Edge processor - Service account should this account be a password enabled or can it be a ... by Srinivasi Loves-to-Learn in Deployment Architecture 02-24-2026 0 0	0	0
Splunk servers on AWS - externalise configuration Hi we have a splunk clustered environment hosted on AWS environment. Normally we are using Ssmsessionmanager role to ... by Karthikeya Communicator in Deployment Architecture 02-23-2026 0 1	0	1
Version 10 Is there any possibility that the app could be released for Version 10? by leykevin New Member in Deployment Architecture 02-18-2026 0 2	0	2
KVStore does not start when running Splunk 9.4 ( WITH A SOLUTION ) After completing the upgrade from Splunk Enterprise version 9.3.3 to v9.4 the KVstore will no longer start. Splunk ha... by triptraptresko Path Finder in Deployment Architecture 02-17-2026 7 3	7	3