Deployment Architecture

Deployment Architecture
Community Activity
sbenamro
Hi, I'd like to set the Bucket time to keep data for 2 months and then to automatically remove it. how do I do it ?
by sbenamro New Member in Deployment Architecture 04-14-2015
0 8
0
8
BunnyHop
Rather than forwarding logs from the proxy server (Bluecoat), I would ideally like to see a SplunkLWF on a server tha...
by BunnyHop Contributor in Deployment Architecture 04-13-2015
0 4
0
4
bonnemak
After much trial and tribulation, i discovered that DB Connect is not compatible with Java 8, at least for MS SQL Ser...
by bonnemak Engager in Deployment Architecture 04-11-2015
0 2
0
2
hartfoml
I am using dbquery to join two tables and display the results. Unfortunately, both tables use the column "NAME" I w...
by hartfoml Motivator in Deployment Architecture 04-11-2015
0 1
0
1
sebdemarss
Hi everybody This error is causing me problems. From a result set (a table with a "name" field) I want to run this t...
by sebdemarss Engager in Deployment Architecture 04-11-2015
0 1
0
1
transtrophe
0
2
hoiby
I have recently added an independent search head which performs distributed searches using two different search peers...
by hoiby Explorer in Deployment Architecture 04-08-2015
0 3
0
3
ben_leung
Has anyone experienced upgrading from a distributed search environment with search head pooling to the new version 6....
by ben_leung Builder in Deployment Architecture 04-08-2015
0 4
0
4
ryuch2002
splunk version : splunk 6.2.2 linux 64bit I made an app and deployed it to the heavy forwarder. My app script list ...
by ryuch2002 Explorer in Deployment Architecture 04-08-2015
0 3
0
3
PPape
Hi, I'm trying to use the DB Connect App with ODBC. The Query over the DB Connect App works just fine but when I tr...
by PPape Contributor in Deployment Architecture 04-08-2015
0 2
0
2
PPape
Hi, i found this in the Docs: Use multiple partitions for index data But there i can only configure homePath = ...
by PPape Contributor in Deployment Architecture 04-08-2015
1 3
1
3
sf_user_199
We have multiple search heads that are available for different functions. We have one running alerts, and another de...
by sf_user_199 Path Finder in Deployment Architecture 04-06-2015
3 1
3
1
BobM
I have read Managing Indexers and Clusters trying to find what the requirements are for a cluster master. It says 'T...
by BobM Builder in Deployment Architecture 04-05-2015
5 3
5
3
transtrophe
I have a distributed splunk deployment with search-head cluster, indexer cluster and forwarders. Currently, the main ...
by transtrophe Communicator in Deployment Architecture 04-05-2015
2 2
2
2
lmyrefelt
Hi, Is there anyone out there that knows if it is possible to control where to write the replicated data in a cluste...
by lmyrefelt Builder in Deployment Architecture 04-04-2015
0 4
0
4
jlroberts
Greetings! We are using S.O.S. to debug our cluster. Right now in SOS, on the cluster master view, it is showing R...
by jlroberts Engager in Deployment Architecture 04-03-2015
0 2
0
2
m_efremov
I have a Splunk 6.2 search head cluster integrated with indexer cluster. If I search in index=_audit, I see _audit ev...
by m_efremov Explorer in Deployment Architecture 04-03-2015
0 10
0
10
transtrophe
Just setting up my first distributed Splunk deployment. I have a SH Cluster with 3 members using search factor = 3 an...
by transtrophe Communicator in Deployment Architecture 04-02-2015
0 8
0
8
Jamshed
I'm running Linux Mint in a VM. When I run ./splunk start in splunk/bin, I get: bash: ./splunk: cannot executre bina...
by Jamshed Explorer in Deployment Architecture 04-02-2015
1 6
1
6
ben_leung
I have setup a search head cluster. I go to the UI to add search peers. The current search head has gotten the config...
by ben_leung Builder in Deployment Architecture 04-01-2015
0 1
0
1
tianchen
Hi, Is there a way to verify what the primality status (whether the bucket is primary) and the site affinity of a m...
by tianchen Explorer in Deployment Architecture 04-01-2015
2 4
2
4
julietjake
Does data loss occur when using DBConnect if two records have the same timestamp? For instance, if DBConnect only pi...
by julietjake Explorer in Deployment Architecture 03-31-2015
0 1
0
1
transtrophe
I am trying to integrate a search head cluster into an indexer cluster. Search head cluster has 3 shc members using s...
by transtrophe Communicator in Deployment Architecture 03-30-2015
1 9
1
9
transtrophe
0
2
ezajac
I've got a SQL Table that contains XML Blobs that I want to index in Splunk. The XML Blob contains carriage returns. ...
by ezajac Path Finder in Deployment Architecture 03-28-2015
0 4
0
4
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...