Deployment Architecture

Community Activity

cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI a problem where the cluster master and deployment server in the distributed Splunk environment cannot be logged in vi... by Bisho-Fouad Explorer in Deployment Architecture 11-06-2023 0 14	0	14
Why is the index size much larger than the actual data by 3x to 4x? Index Size is 5.3G vs 1.6G Raw Data:Raw data Index on Splunk This is also affecting our licensing plans as well. Thi... by red2play Loves-to-Learn in Deployment Architecture 11-03-2023 0 1	0	1
IOWAIT alert One the search head that our SOC uses, i get the following:IOWaitSum of 3 highest per-cpu iowaits reached red thresho... by FPERVIL Explorer in Deployment Architecture 11-01-2023 0 1	0	1
failed_because_BUNDLE_DATA_TRANSMIT_FAILURE Dear Team, We have a cluster step up where 3 search head(cluster) , 3 indexer(cluster),1 index master,1 deployer, 1 ... by Venkataraman Engager in Deployment Architecture 10-31-2023 0 5	0	5
Universal forwarder on intranet environment Hi All,Our scenario is like, in our AWS environment ,we want to collect our logs by using universal forwarder from ou... by shriramwasule New Member in Deployment Architecture 10-31-2023 0 2	0	2
what is best practices for managing multiple index Hello,we have a data center with several type of equipment such as servers, switches, routers, EDR, some IOT Sensors,... by maede_yavari Explorer in Deployment Architecture 10-30-2023 0 7	0	7
With out Cluster master, set up High availability server. Hi team, My project Zone 1 have Deployment server , HF and (SH+Indexer)Zone 2 also Deployment server ,HF and (SH+... by vijreddy30 Loves-to-Learn Everything in Deployment Architecture 10-27-2023 0 1	0	1
Regarding Splunk license on 2 data centers Hello All, We are setting up a Splunk enterprise multisite cluster, and i was wondering can we have 2 license master,... by dhana22 Explorer in Deployment Architecture 10-26-2023 0 1	0	1
Issue with the splunk reload deploy-server Hello,Upon attempting to execute the command $SPLUNK_HOME/bin/splunk reload deploy-server following the update of app... by Raj Builder in Deployment Architecture 10-24-2023 0 1	0	1
Implement Splunk high availability servers Hi All, Currently Development zone-1 HF and( SearchHead+Indexer ) single instanceQA -HF,Deploymentserver and Deployme... by vijreddy30 Loves-to-Learn Everything in Deployment Architecture 10-23-2023 0 4	0	4
Multisite Indexer Cluster Replication Port Hi at all,I have to configure a multisite Indexer Cluster and I have a dubt:in the Splunk architectig course, the ind... by gcusello SplunkTrust in Deployment Architecture 10-20-2023 0 3	0	3
Migrate indexer database to new cluster Hello, all!Im hopefully looking for an ELI5 (explain like im 5) on the best way to migrate indexer cluster database t... by Darthsplunker Path Finder in Deployment Architecture 10-19-2023 1 3	1	3
SF & RF doesn't meet after removing indexer from cluster I have a bucket in fixup tasks in indexer cluster-> bucket status, its been struck. Both SF & RF. So, both SF and RF... by sandeepreddy947 Path Finder in Deployment Architecture 10-18-2023 0 2	0	2
Why are RF and SF not met? Been having trouble with my indexers but everything is fine now and up. But now my RF and SF are still not been met. ... by woodlandrelic Path Finder in Deployment Architecture 10-18-2023 0 7	0	7
Could I put all management functions(CM\Deployer\MC\LM) in one node？ SpoilerFailed to contact the cluster manager.ERROR: Cluster manager is not enabled on this nodeFailed to contact the ... by quentin_young Explorer in Deployment Architecture 10-18-2023 0 2	0	2
Bin bucket to start with event value Hi All, I am using bin command to bucket all the event count based on a span of 200. The command I used is {my sear... by lakssiv New Member in Deployment Architecture 10-17-2023 0 9	0	9
Is it possible to enable or disable an application state in app.conf via deployment server? Hi, I'm trying to disable a forwarder. For that, i'm changing the state to disabled in app.conf of collector class. I... by Priya312 Explorer in Deployment Architecture 10-17-2023 3 2	3	2
Data Age vs Frozen Age on _internal index It's my understanding that the default frozenTimePeriodInSecs is 6 years. I am confused about what this graph means... by mburgess97 Path Finder in Deployment Architecture 10-17-2023 0 4	0	4
Hitting limit: maximum number of concurrent auto-summarization - with 0 events and idle CPU Hello Team,Pre staging environment (not production), a single server with 12 CPU + 24 GB or memory + raid0 nvme (2.5G... by MichalG1 Path Finder in Deployment Architecture 10-16-2023 0 1	0	1
Rebalancing script To rebalance data, splunk only offers you to rebalance one single index or all the indexes but there is no option to ... by yoho Contributor in Deployment Architecture 10-14-2023 2 0	2	0
500GB day license - HW needed and best practice "N" of Search Heads/indexers Hi, if we upgrade license to 500GB.What is best practice Hardware architecture (CPU +RAM) based and number of "N" Sea... by jbanAtSplunk Communicator in Deployment Architecture 10-13-2023 0 6	0	6
ansible-role-for-splunk framework install search head apps without cluster We use the ansible-role-for-splunk framework found on GitHub: https://github.com/schneewe/ansible-role-for-splunkIt s... by jklingberg Engager in Deployment Architecture 10-11-2023 0 0	0	0
Deploy App on a Search Head Cluster that contains a 3 folders with different files on members Hi,I have created a custom app to implement ACME on search head cluster members with a script on bin folder that upda... by jbgraca Explorer in Deployment Architecture 10-11-2023 0 3	0	3
Can we use instances recommended by AWS compute optimizer for hosting Splunk in AWS We have a few instances hosted in AWS that are extremely underutilized (single digit avg. cpu% for the 3 months.The A... by AmithB Engager in Deployment Architecture 10-10-2023 0 3	0	3
AWS Cloudwatch Logs to Splunk Ingestion We have Splunk Heavy Forwarder running in a couple of different regions/accounts in AWS.We need to ingest the CloudWa... by AmithB Engager in Deployment Architecture 10-10-2023 0 0	0	0