Deployment Architecture

Community Activity

Will setting the percent_peers_to_restart = 0 prevent a rolling restart? Will setting the percent_peers_to_restart = 0 prevent a rolling restart? by jwoger_splunk Splunk Employee in Deployment Architecture 02-10-2015 4 1	4	1
Data not coming in from some forwarders I used the deployment monitor to create a new server class and added 11 servers to it. I created an app that just ta... by RVDowning Contributor in Deployment Architecture 02-10-2015 0 4	0	4
Can I use search head clustering feature with splunk 6.1.x indexers / search peers? I want to start using search head clustering but want to know if I need to upgrade my search head peers (indexers) t... by splunkIT Splunk Employee in Deployment Architecture 02-10-2015 1 1	1	1
Why am I getting error "Indexing not ready, fewer than replication factor peers are up" with my current Splunk 6.1 multisite cluster configuration? Hi All, I am trying to setup Splunk in multisite environment. I have two sites in environment. Details of my environ... by Sourabhv05 Communicator in Deployment Architecture 02-10-2015 2 20	2	20
java bridge fails to reload after db input changes Hi all! I’m totally confused with Splunk DB connect java bridge behavior. We have : a search head, two indexers (dis... by ribentrop Explorer in Deployment Architecture 02-09-2015 0 2	0	2
Key differences between clustered and non-clustered deployments We are currently looking at going to a clustered deployment and I was going though the documentation. One of the key... by pil321 Communicator in Deployment Architecture 02-09-2015 0 6	0	6
Why is Splunk not able to recognize bootstrap command? I am setting up Search Head clustering. I am able to run the initialize command but while creating a captain by runni... by Sourabhv05 Communicator in Deployment Architecture 02-09-2015 0 5	0	5
Problem while trying to run status command for search head clustering When i am trying to execute search head status command "splunk show shcluster-status -auth admin:password" from comma... by Sourabhv05 Communicator in Deployment Architecture 02-08-2015 0 2	0	2
Why Windows Search Head generates a Lock file after restart and how to permanently prevent this? Hi All: I am facing an issue where the Splunk daemon after a recycle generates a lock file on Search Head. I am requ... by OMohi Path Finder in Deployment Architecture 02-06-2015 0 3	0	3
Backfill script doesn't pass auth parameter in Linux but works just fine in Windows I have a saved search that is currently running on a Windows search head that I have scheduled to backfill once a wee... by kearaspoor SplunkTrust in Deployment Architecture 02-06-2015 1 2	1	2
Splunk DB Connect 1.1.6: How to troubleshoot why Java Bridge server is not running after reboot in Splunk 6.2.1? Hello, The bridge is working after a splunk re-install, but after reboot, it no longer works. Error reported in jbri... by davi1046 Explorer in Deployment Architecture 02-06-2015 0 1	0	1
Deployment Server not pushing apps to universal forwarder clients after Splunk 6.0 upgrade I just upgraded the cluster (search head, indexers, heavy forwarders, etc except universal forwarders) to splunk 6.0.... by jonahtang Explorer in Deployment Architecture 02-05-2015 0 2	0	2
Is there a way to create new indexes from Cluster Master UI which gets replicated/created on index peers? I want to know if there is a way to create new indexes from cluster master UI which gets replicated/created to index ... by shivanshsingh Explorer in Deployment Architecture 02-05-2015 0 1	0	1
Accelerated Saved Search and Search Head Clustering cluster replication How to check if the report acceleration is used on my environment where we are using Search Head Clustering( 3 memb... by sat94541 Communicator in Deployment Architecture 02-04-2015 0 1	0	1
ERROR TcpChannel - Error trying to begin socket accept: An invalid argument was supplied. Upgraded Deployment Server / License Server to Version 6. Runs OK for 15 minutes then maxes out CPU and starts to fa... by alane Engager in Deployment Architecture 02-04-2015 1 2	1	2
How do I roll buckets to frozen by # of days? I would like to keep data for an index around for no longer than 6 months. Is there a setting to do this or can I onl... by jamesvz84 Communicator in Deployment Architecture 02-04-2015 0 4	0	4
Can you use both mounted and shared bundles with the same index cluster? I have a dedicated search pool using mounted bundles to talk to our index cluster. Can I also have a standalone sear... by ckurtz Path Finder in Deployment Architecture 02-04-2015 0 2	0	2
Why can't I see indexes from the search head after enabling Index Clustering? Details: - 3 x Indexers - 1 x Cluster Master - 1 x Search head - 1 x Deployment server - All running 6.2.0 I cr... by TerrySoucy Explorer in Deployment Architecture 02-03-2015 1 10	1	10
DB Connect in a Clustered Environment: Why am I getting missing python script errors, failed configuration bundle distribution and duplicate data? We have a master cluster, 2 search heads and 2 indexers in our setup. We have done development on a standalone server... by cwilmoth Path Finder in Deployment Architecture 02-02-2015 2 3	2	3
Is it possible to use one deployment server instance as a deployment client?? I have multiple environments configured with Splunk (Say DEV, Testing,UAT and PROD). My DEV environment has one Searc... by somesoni2 Revered Legend in Deployment Architecture 02-02-2015 1 5	1	5
How can I get a complete list of processes used by Splunk for Linux? I am using 6.2.1 on Linux and we need a list of all processes that are used by splunk. I could find below list for wi... by cwl Contributor in Deployment Architecture 02-02-2015 8 3	8	3
Backup of indexed data in cluster with two nodes and replication factor = 2 Hi, we have a multisite indexers cluster with two nodes and replication factor = 2. All instances are running Splunk... by mas Path Finder in Deployment Architecture 02-02-2015 0 2	0	2
Splunk DB Connect: Why are events from before a certain date coming in with a timestamp as today's date instead? Hi, I have configured a Database Input as below: [dbmon-tail://MIMAS/DI-MBT-LAB_ScanBadge] host = plxs_a_sb index =... by sanjay_shrestha Contributor in Deployment Architecture 01-30-2015 0 4	0	4
Can i change phoneHomeIntervalInSecs setting dynamically I would like to know if I can change the phoneHomeIntervalInSecs time in sec dynamically or do i need to do a restart... by JackNobrega Explorer in Deployment Architecture 01-30-2015 0 1	0	1
What is the process to move an infrastructure from virtual machines to physical machines in our Splunk 6.1.3 environment? Dear All, We have two production search heads, three indexers clustered, a cluster master, and a deployment server. ... by gajananh999 Contributor in Deployment Architecture 01-29-2015 2 2	2	2

Get Updates on the Splunk Community!

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Deployment Architecture

Will setting the percent_peers_to_restart = 0 prevent a rolling restart?

Data not coming in from some forwarders

Can I use search head clustering feature with splunk 6.1.x indexers / search peers?

Why am I getting error "Indexing not ready, fewer than replication factor peers are up" with my current Splunk 6.1 multisite cluster configuration?

java bridge fails to reload after db input changes

Key differences between clustered and non-clustered deployments

Why is Splunk not able to recognize bootstrap command?

Problem while trying to run status command for search head clustering

Why Windows Search Head generates a Lock file after restart and how to permanently prevent this?

Backfill script doesn't pass auth parameter in Linux but works just fine in Windows

Splunk DB Connect 1.1.6: How to troubleshoot why Java Bridge server is not running after reboot in Splunk 6.2.1?

Deployment Server not pushing apps to universal forwarder clients after Splunk 6.0 upgrade

Is there a way to create new indexes from Cluster Master UI which gets replicated/created on index peers?

Accelerated Saved Search and Search Head Clustering cluster replication

ERROR TcpChannel - Error trying to begin socket accept: An invalid argument was supplied.

How do I roll buckets to frozen by # of days?

Can you use both mounted and shared bundles with the same index cluster?

Why can't I see indexes from the search head after enabling Index Clustering?

DB Connect in a Clustered Environment: Why am I getting missing python script errors, failed configuration bundle distribution and duplicate data?

Is it possible to use one deployment server instance as a deployment client??

How can I get a complete list of processes used by Splunk for Linux?

Backup of indexed data in cluster with two nodes and replication factor = 2

Splunk DB Connect: Why are events from before a certain date coming in with a timestamp as today's date instead?

Can i change phoneHomeIntervalInSecs setting dynamically

What is the process to move an infrastructure from virtual machines to physical machines in our Splunk 6.1.3 environment?

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Preparing your Splunk Environment for OpenSSL3

Announcing Modern Navigation: A New Era of Splunk User Experience

Cisco Enhanced Netflow Add-On Insanity

edge processor service account

Splunk Attack Range v4 Local Ubuntu

Active Directory Deployment Failure in Splunk Atta...

State of SIR in ServiceNow not capturing

Deployment Architecture

Join the Conversation