Deployment Architecture

Discussions

Thread Info

Splunk DB Connect 1.1.6: How to troubleshoot why Java Bridge server is not running after reboot in Splunk 6.2.1?

Hello, The bridge is working after a splunk re-install, but after reboot, it no longer works. Error reported in jb...

by Explorer in

Deployment Server not pushing apps to universal forwarder clients after Splunk 6.0 upgrade

I just upgraded the cluster (search head, indexers, heavy forwarders, etc except universal forwarders) to splunk 6.0....

by Explorer in

Is there a way to create new indexes from Cluster Master UI which gets replicated/created on index peers?

I want to know if there is a way to create new indexes from cluster master UI which gets replicated/created to index ...

by Explorer in

Accelerated Saved Search and Search Head Clustering cluster replication

How to check if the report acceleration is used on my environment where we are using Search Head Clustering( 3 member...

by Communicator in

ERROR TcpChannel - Error trying to begin socket accept: An invalid argument was supplied.

Upgraded Deployment Server / License Server to Version 6. Runs OK for 15 minutes then maxes out CPU and starts to fai...

by Engager in

How do I roll buckets to frozen by # of days?

I would like to keep data for an index around for no longer than 6 months. Is there a setting to do this or can I onl...

by Communicator in

Can you use both mounted and shared bundles with the same index cluster?

I have a dedicated search pool using mounted bundles to talk to our index cluster. Can I also have a standalone se...

by Path Finder in

Why can't I see indexes from the search head after enabling Index Clustering?

Details: - 3 x Indexers - 1 x Cluster Master - 1 x Search head - 1 x Deployment server - All running 6.2.0 I creat...

by Explorer in

DB Connect in a Clustered Environment: Why am I getting missing python script errors, failed configuration bundle distribution and duplicate data?

We have a master cluster, 2 search heads and 2 indexers in our setup. We have done development on a standalone server...

by Path Finder in

Is it possible to use one deployment server instance as a deployment client??

I have multiple environments configured with Splunk (Say DEV, Testing,UAT and PROD). My DEV environment has one Searc...

by Revered Legend in

How can I get a complete list of processes used by Splunk for Linux?

I am using 6.2.1 on Linux and we need a list of all processes that are used by splunk. I could find below list for wi...

by Contributor in

Backup of indexed data in cluster with two nodes and replication factor = 2

Hi, we have a multisite indexers cluster with two nodes and replication factor = 2. All instances are running Splu...

by Path Finder in

Splunk DB Connect: Why are events from before a certain date coming in with a timestamp as today's date instead?

Hi, I have configured a Database Input as below: [dbmon-tail://MIMAS/DI-MBT-LAB_ScanBadge] host = plxs_a_sb ind...

by Contributor in

Can i change phoneHomeIntervalInSecs setting dynamically

I would like to know if I can change the phoneHomeIntervalInSecs time in sec dynamically or do i need to do a restart...

by Explorer in

What is the process to move an infrastructure from virtual machines to physical machines in our Splunk 6.1.3 environment?

Dear All, We have two production search heads, three indexers clustered, a cluster master, and a deployment server...

by Contributor in

Clustering: Can a cluster master also act as a search head?

My current splunk (standalone) index/search host has a bunch of proc/mem but is low on disk. I have two other servers...

by Explorer in

How to add a new index to a cluster

Hi I am new to setting up clusters and setting up a new cluster so apologies in advance if this is a simple question....

by Engager in

How to move cold and frozen buckets to a new disk?

I'm looking for some direction on how to move cold and frozen buckets to a new disk. We have a single server Windows ...

by New Member in

Is it possible to use a single search-head as the cluster-master with 2 indexers in a 6.2.x cluster environment?

Hello, i have got the task to design an "as-small-as-possible" cluster in our test-demo-environment According t...

by Explorer in

Why does the bucket command on _time with span=12h only return odd numbers (11:00, 23:00), not even (12:00, 24:00)?

Hi All, I am doing a simple bucketing of events and counting it. But when i bucket the events its always does it i...

by Contributor in

What are other options to allow our search head and index cluster to connect without an HTTP proxy?

Hi, We have a Search head on the other side of a WAN which needs to search against an Index cluster in a sensitive...

by Path Finder in

Is there best practices for linux server builds for splunk file systems ...

For example : /PS _INSTALL - 5GB /splunk/fsdev01 -20GB /splunk/fsdev07 -20GB

by New Member in

Can you programmattically add servers to an existing server-class?

Hi, In our private cloud, we use chef to push out Splunk configs, which to this point, have been controlled by the...

by Champion in

サーチヘッドのメモリ使用率について

サーチヘッドを5から6.1.4にアップグレードしたところ、サーチヘッドのsplunkdのメモリ使用率が毎日300MB〜400MBくらい解放されずに増え続けていますが、原因および回避策を分かる方いますでしょうか？

by Contributor in

Changing Indexer IP in Univerisal Forwader

Hi All, I need help , We have installed universal forwarder in around 20 machines and provided the deployment , In...

by Path Finder in

Get Updates on the Splunk Community!

Deployment Architecture

Discussions

Splunk DB Connect 1.1.6: How to troubleshoot why Java Bridge server is not running after reboot in Splunk 6.2.1?

Deployment Server not pushing apps to universal forwarder clients after Splunk 6.0 upgrade

Is there a way to create new indexes from Cluster Master UI which gets replicated/created on index peers?

Accelerated Saved Search and Search Head Clustering cluster replication

ERROR TcpChannel - Error trying to begin socket accept: An invalid argument was supplied.

How do I roll buckets to frozen by # of days?

Can you use both mounted and shared bundles with the same index cluster?

Why can't I see indexes from the search head after enabling Index Clustering?

DB Connect in a Clustered Environment: Why am I getting missing python script errors, failed configuration bundle distribution and duplicate data?

Is it possible to use one deployment server instance as a deployment client??

How can I get a complete list of processes used by Splunk for Linux?

Backup of indexed data in cluster with two nodes and replication factor = 2

Splunk DB Connect: Why are events from before a certain date coming in with a timestamp as today's date instead?

Can i change phoneHomeIntervalInSecs setting dynamically

What is the process to move an infrastructure from virtual machines to physical machines in our Splunk 6.1.3 environment?

Clustering: Can a cluster master also act as a search head?

How to add a new index to a cluster

How to move cold and frozen buckets to a new disk?

Is it possible to use a single search-head as the cluster-master with 2 indexers in a 6.2.x cluster environment?

Why does the bucket command on _time with span=12h only return odd numbers (11:00, 23:00), not even (12:00, 24:00)?

What are other options to allow our search head and index cluster to connect without an HTTP proxy?

Is there best practices for linux server builds for splunk file systems ...

Can you programmattically add servers to an existing server-class?

サーチヘッドのメモリ使用率について

Changing Indexer IP in Univerisal Forwader

Community Content Calendar, November Edition

October Community Champions: A Shoutout to Our Contributors!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

Splunk Attack Range v4 Local Ubuntu

Active Directory Deployment Failure in Splunk Atta...

State of SIR in ServiceNow not capturing

Offline Logging and oberservability - on permises

v0.116.0 upgrade for EKS cluster gives webhook err...

Deployment Architecture

Are you a member of the Splunk Community?

Discussions