Deployment Architecture

Community Activity

When archiving to Hadoop using Hunk from an indexer cluster, is only the primary copy of a bucket archived, or are all copies archived? When archiving to Hadoop using Hunk from an indexer cluster, is only the primary copy of a bucket archived, or are al... by Jason Motivator in Deployment Architecture 11-09-2015 0 1	0	1
Why I'm not see new host from added Universal Forwarder? I have installed forwarder to a new Windows machine with default settings (with installed Splunk Add-on for Microsoft... by DimkoBilanko Explorer in Deployment Architecture 11-06-2015 0 3	0	3
Error trying to push app from deployer I'm getting this error when I try to push an app to my search head cluster: Error when getting master uri from target... by gwobben Communicator in Deployment Architecture 11-06-2015 1 3	1	3
splunk restart on all my forwarders Some of my logs stops getting indexed until i do a splunk restart on those forwarders. So can u tell me a way i can ... by splunksurekha Path Finder in Deployment Architecture 11-06-2015 0 5	0	5
time indexing not correct Hi attached is the image which shows there is a difference in the Time field and the actual time which comes from the... by splunksurekha Path Finder in Deployment Architecture 11-06-2015 0 1	0	1
Splunk Universal forwarder Hi all, I would like for security reason use the Splunk Universal forwarder on RHEL servers. But, I have to send lo... by donypie New Member in Deployment Architecture 11-06-2015 0 4	0	4
How long does Deployment Client continues to poll to Deployment Server ? Hi Splunkers, I'm considering about the configuration of Deployment Server (and Client). How long does Deployment C... by sunrise Contributor in Deployment Architecture 11-06-2015 1 3	1	3
Add a static field during indexing Hi All,, Want to add a static field called SLAtime for each filename pattern range which is present in a existing fi... by xbbj3nj Path Finder in Deployment Architecture 11-05-2015 0 7	0	7
Path on server for the url: http(s)://Search_Head:8000 I have a SHC of 4 SHs with a h/w LB upfront. There needs to be a health_check_api.html file in the server so that th... by ishaanshekhar Communicator in Deployment Architecture 11-05-2015 0 1	0	1
Do all server configurations need to be identical for both indexer and search head clustering environments? Hi Experts, I have gone through the Capacity planning document and derived my Splunk server configurations based on ... by krishnarajapant Path Finder in Deployment Architecture 11-05-2015 0 3	0	3
How to monitor the status of an app for changes on a deployment client? Hi, My Understanding: If I have a standard deployment architecture with deployment server and clients and deploy an ... by doitslu Explorer in Deployment Architecture 11-05-2015 0 12	0	12
I have sudo splunk user access, but why am I getting error "Could not create Splunk settings directory at..." with my command to reload the deployment server? Hi I have the sudo splunk user access. I am trying to reload the deployment server under $SPLUNK_HOME/bin with the ... by pavanae Builder in Deployment Architecture 11-03-2015 0 1	0	1
Search Head Error : Forwarding to indexer group primary_indexers blocked Hello Splunkers, I have 4 Indexers in a cluster, serving 2 search heads, both stand-alone (no clustering/pooling), w... by somesoni2 Revered Legend in Deployment Architecture 11-03-2015 2 6	2	6
Multisite Indexer Clustering Performance: If a Search Head uses site0 for search affinity, how does this work under the hood? I want to start with a couple of statements that I'd like to be corrected on if I'm interpreting them incorrectly. I... by rlawrence_fnni Explorer in Deployment Architecture 11-03-2015 1 2	1	2
Why does the Deployer fail to deploy configuration bundle to search head cluster members, even with matching pass4SymmKey values? Due to this error: Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps ba... by murikadan Path Finder in Deployment Architecture 11-03-2015 1 4	1	4
Slave apps vs deployment apps Hi, since index replication we have got another way to distribute configuration. I already found out by troubleshooti... by gschmitz Path Finder in Deployment Architecture 11-02-2015 0 4	0	4
Should I increase search head specs, add a new search head, or migrate to search head clustering for our growing Splunk environment and user base? Hi all, We're starting to ramp up our usage of Splunk with a lot of extra data, eventually adding Enterprise Securit... by awendler Explorer in Deployment Architecture 11-02-2015 0 3	0	3
Splunk DB Connect 1: How to restrict dbquery results from an MSSQL database to the range selected in the time picker? I have created a dashboard that has a few filters on it which are used to retrieve specific rows from the MSSQL datab... by duffeysplunk Path Finder in Deployment Architecture 11-01-2015 0 1	0	1
Do Splunk indexers in an indexer cluster have to run Splunk on the same partition on every machine? Hi! I have two VMs with Splunk that I want to make an indexer cluster out of. The VMs are almost identical, but the... by hettervik SplunkTrust in Deployment Architecture 10-30-2015 0 4	0	4
How to migrate to a new deployment server? I created an "app" on my old deployment server in etc/deployment-apps/ called deployserver, and in it, created the lo... by manderson7 Contributor in Deployment Architecture 10-30-2015 0 3	0	3
Is it possible to restrict index replication from specific sites? Environment with: - 6 sites - 4 sites with peer nodes - 2 sites, 'alpha' and 'bravo' with only search heads Is i... by rgaleone1 Path Finder in Deployment Architecture 10-29-2015 0 2	0	2
Multisite Indexer Clustering: How to configure site_replication_factor for two sites so site2 has its own data and a copy of site1, but have site1 only have its own data? Hi all, I'm demoing out a setup with two sites, but the only thing site 2 has is an Indexer. The only purpose of the... by j4adam Communicator in Deployment Architecture 10-29-2015 1 1	1	1
Splunk When and Why ? Hi guys, I am a newbie to splunk, as i was reading through Splunk i understand the splunk indexes the data only duri... by samnik60 New Member in Deployment Architecture 10-29-2015 0 1	0	1
Why does our Splunk 6.3 Search Head Cluster fail only when a specific member is elected as the Captain? I have built a search head cluster in our 6.3 Splunk environment. Distributed Searches, App roll out and general sea... by kwasielewski Path Finder in Deployment Architecture 10-28-2015 1 3	1	3
What happens to deployed apps on deployment clients when phoning home and doesn't find serverclass configs for a whitelisted IP? What happens to the deployed apps in the deployments-clients when it phones home and doesn't find the serverclass con... by splunker12er Motivator in Deployment Architecture 10-28-2015 0 2	0	2

Get Updates on the Splunk Community!

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Deployment Architecture

When archiving to Hadoop using Hunk from an indexer cluster, is only the primary copy of a bucket archived, or are all copies archived?

Why I'm not see new host from added Universal Forwarder?

Error trying to push app from deployer

splunk restart on all my forwarders

time indexing not correct

Splunk Universal forwarder

How long does Deployment Client continues to poll to Deployment Server ?

Add a static field during indexing

Path on server for the url: http(s)://Search_Head:8000

Do all server configurations need to be identical for both indexer and search head clustering environments?

How to monitor the status of an app for changes on a deployment client?

I have sudo splunk user access, but why am I getting error "Could not create Splunk settings directory at..." with my command to reload the deployment server?

Search Head Error : Forwarding to indexer group primary_indexers blocked

Multisite Indexer Clustering Performance: If a Search Head uses site0 for search affinity, how does this work under the hood?

Why does the Deployer fail to deploy configuration bundle to search head cluster members, even with matching pass4SymmKey values?

Slave apps vs deployment apps

Should I increase search head specs, add a new search head, or migrate to search head clustering for our growing Splunk environment and user base?

Splunk DB Connect 1: How to restrict dbquery results from an MSSQL database to the range selected in the time picker?

Do Splunk indexers in an indexer cluster have to run Splunk on the same partition on every machine?

How to migrate to a new deployment server?

Is it possible to restrict index replication from specific sites?

Multisite Indexer Clustering: How to configure site_replication_factor for two sites so site2 has its own data and a copy of site1, but have site1 only have its own data?

Splunk When and Why ?

Why does our Splunk 6.3 Search Head Cluster fail only when a specific member is elected as the Captain?

What happens to deployed apps on deployment clients when phoning home and doesn't find serverclass configs for a whitelisted IP?

Splunk Auto Ingestion Parallel Pipeline Scaling

Best Practices: Splunk auto adjust pipeline queue

Announcing Modern Navigation: A New Era of Splunk User Experience

Cisco Enhanced Netflow Add-On Insanity

edge processor service account

Splunk Attack Range v4 Local Ubuntu

Active Directory Deployment Failure in Splunk Atta...

State of SIR in ServiceNow not capturing

Deployment Architecture

Join the Conversation