Deployment Architecture

Community Activity

Will buckets created in a single indexer cluster be replicated across multiple sites when migrated to a multisite cluster? Will buckets created in single cluster be replicated across multi-sites when it is migrated to multi-site cluster? I ... by rbal_splunk Splunk Employee in Deployment Architecture 12-21-2023 0 7	0	7
Splunk Access This XML file does not appear to have any style information associated with it. The document tree is shown below. <re... by anlbrown2 New Member in Deployment Architecture 12-20-2023 0 1	0	1
UF not connecting with Splunk Enterprise (Cooked connection timed out) Hello, I have tried numerous configurations to get my Splunk Universal Forwarder to connect to my Splunk Enterprise i... by HankinAlex Explorer in Deployment Architecture 12-19-2023 0 1	0	1
DB inputs only running on Search Head Cluster Captain Hi all,I built a dedicated Search Head Cluster with 3 members and a deployer to load and test how DB Connect works in... by aaronbarry73 Path Finder in Deployment Architecture 12-19-2023 0 5	0	5
How to restart a SHC (search head cluster) at the server level? I am at a client where, by policy, they must restart servers every week. They have an 8-node Search Head Cluster. Wha... by Jason Motivator in Deployment Architecture 12-14-2023 0 9	0	9
Effects of a kvstore resync on a search head cluster Hello everyone,I have a kvstore down on a 4 member search head cluster.I'd like to resync it without impacting too mu... by emallinger Communicator in Deployment Architecture 12-14-2023 1 4	1	4
How to send snmp traps from my Linux machine to a Splunk indexer server on threshold values? I've been trying to do this for the past three days. I want my Linux machine to send snmp traps to splunk server on ... by richaGindodia Path Finder in Deployment Architecture 12-14-2023 7 8	7	8
Understanding TsidxStats and tstats. Hello Team,Everyone has probably seen this error. Error in 'TsidxStats': _time aggregations are not yet supported exc... by Thats_my_usrnme Explorer in Deployment Architecture 12-08-2023 0 1	0	1
Cloud environment using Docker splunk Hello teamI am facing issue in setting up cloud like architecture using docker-splunkI am following this page: https:... by djindal Splunk Employee in Deployment Architecture 12-08-2023 0 0	0	0
migrating production deployment server to new machine Hi All, we have our server that's reaching EOL and is currently a deployment server for 4k clients and we need to mig... by Chiranjeev Explorer in Deployment Architecture 12-07-2023 0 1	0	1
Reference to the variable from the query in XML Hi, I have a dashboard in Splunk and I have a question About the query, I have a line of fields and I have a column. ... by Bracha Path Finder in Deployment Architecture 12-03-2023 0 7	0	7
Making indexes available to searchhead without indexes.conf Scenario: I have a searchhead and two idx in a cluster. there is an index (index_a) defined in the cluster. Until now... by Brainizer Explorer in Deployment Architecture 12-01-2023 0 4	0	4
minIO as frozen logs storage for Splunk How to store logs in minIO (on-premises) from Splunk.I created bucket named splunk. I successfully mc cp test.txt s3/... by harras New Member in Deployment Architecture 12-01-2023 0 0	0	0
How to bypass https in peer configuration and use http I am trying to set up POC for Splunk indexing and the manager node is up, but runs on an HTTP link (Certificate is no... by himaniarora20 Explorer in Deployment Architecture 11-30-2023 0 6	0	6
add Deployer to existing search head cluster Hi,Is it possible to add a deployer server to existing search head cluster?Existing search heads are fresh and we ha... by maede_yavari Explorer in Deployment Architecture 11-28-2023 0 2	0	2
Internet connectivity configuration file Hi All,Can someone help me understand which .conf file is responsible to control the connectivity to/from Internet.Wa... by DanAlexander Communicator in Deployment Architecture 11-27-2023 0 3	0	3
Why doesn't the modification propagate to the search head cluster via the deployer ? Hello Splunkers I use the deployer to deploy config apps or add_ons on a search head cluster. This works when I want ... by pmerlin1 Path Finder in Deployment Architecture 11-24-2023 0 10	0	10
Regarding Setting up the Multisite Indexer Cluster Hello All, I am setting up a multisite indexer cluster with cluster manager redundancy, I am setting up 2 clusterma... by dhana22 Explorer in Deployment Architecture 11-24-2023 0 4	0	4
rf/sf set to 1 for 2 site system. I have a client creating a new system that will have 2 sites with rf/sf per site being 1 and the total rf/sf being 2.... by smithy001 Explorer in Deployment Architecture 11-23-2023 0 6	0	6
Sending splunk data through a dlp to a heavy forwarder Got a customer wanting the UFs to send data to the forcepoint DLP and then to the intermediate heavy forwarder. The r... by jcgever Explorer in Deployment Architecture 11-21-2023 0 1	0	1
How to troubleshoot the applied regex in the server Hi,I had blacklisted the "(?:ParentProcessName).+(?:C:\\Program Files\\Windows Defender Advanced Threat Protection\\)... by smith_ Builder in Deployment Architecture 11-21-2023 0 17	0	17
What are the best practices for creating and distributing apps to UF from a DS in a Splunk Cloud scenario? I have a Splunk Cloud instance where we send logs from servers with the Universal Forwarder installed. All UF are man... by pvarelab Path Finder in Deployment Architecture 11-21-2023 0 3	0	3
increase search performance in clustered environment Hi allI created an environment with following instances:cluster masterthree search headsfour indexersheavy forwarderl... by sigma Path Finder in Deployment Architecture 11-19-2023 0 2	0	2
Heavy Forwarder Instance How Do I get the instance for heavy forwader for my vm box for set up. Is the UF instance differ from HF instance? by blkscorpio Observer in Deployment Architecture 11-18-2023 0 6	0	6
buckets - hot/warm and cold on 2 separate volumes if we configure a fast volume for hot/warm and slower spindles for cold and set maxVolumeDataSizeMB to enforce sizes.... by smithy001 Explorer in Deployment Architecture 11-15-2023 0 5	0	5