Deployment Architecture

Community Activity

Is there a REST API that can tell if a search head running on search head pooling or local? Is there a REST API that can tell if a search head running on search head pooling or local? It will be helpful for o... by philip_wong Communicator in Deployment Architecture 08-26-2014 1 2	1	2
Integrate Splunk with RSA Customer already deploy RSA by sending syslog, snmp trap, WMI, and proprietary RSA agent to sent logs to RSA logger. ... by santisookgable New Member in Deployment Architecture 08-24-2014 0 7	0	7
Can I find where an event is located in splunk ? I am trying to localize where my events are located. - in which indexer - in which index - in which bucket Can I ... by mataharry Communicator in Deployment Architecture 08-19-2014 2 1	2	1
Conf file precedence in a distributed setup? I read the admin guide section on conf file precedence. It didn't see any info on the implications of a distributed ... by infrauser Explorer in Deployment Architecture 08-19-2014 1 3	1	3
How to prevent search head from searching peer by default? When setting up a distributed search peer, is it possible to NOT search the peer unless specified in the search strin... by eallanjr Explorer in Deployment Architecture 08-18-2014 0 3	0	3
How to configure indexes.conf for bucket retention and rotation policy? I have an index called "sharp" where currently I have ~ 90 days worth of data in the hotbucket (db directory). For 9... by romitsn New Member in Deployment Architecture 08-18-2014 0 1	0	1
Is there any advantage to setting RF (Replication Factor) to a different number than SF (Search Factor) ? For example, what benefit would I get from using a Replication Factor of 1 and a Search Factor of 2, vs a Replication... by bandit Motivator in Deployment Architecture 08-18-2014 3 8	3	8
Not possible to stream data - can I create files that I load into indexer? I have a lot of instrumentation data from remote sites that I am collecting in Splunk. This data needs to go to the ... by belka Path Finder in Deployment Architecture 08-15-2014 0 3	0	3
Is there updated documentation on how to compile MIBs with CLI examples for Linux? Hello everyone. I am having a heck of a time compiling custom MIBs. Is there any progress in regards to being able t... by shandman Path Finder in Deployment Architecture 08-15-2014 0 1	0	1
Splunk Universal Forwarder Data Recovery Following a Network Issue Hi, Just wondering if anyone has encountered the following issue. I want to setup a distributed Splunk environmen... by splunkmasterfle Path Finder in Deployment Architecture 08-14-2014 0 2	0	2
available space How to find out available space in server using splunk? by vamseedeep New Member in Deployment Architecture 08-12-2014 0 2	0	2
Is it possible to set up search head pooling with just one server? Hi, I am rolling out a new dev environment, which will include SHP. Unfortunately, only one of the servers is ready... by a212830 Champion in Deployment Architecture 08-09-2014 0 1	0	1
duplicate license Hi, I am building out a new dev environment, and I just created a bunch of new indexers on brand new vm's. I also s... by a212830 Champion in Deployment Architecture 08-09-2014 0 3	0	3
Splunk Architecture for huge system Hi, We are starting Splunk on a small environment (2 UF + 1 Indexer) which will eventually be deployed to an huge P... by meenal901 Communicator in Deployment Architecture 08-08-2014 0 1	0	1
Bundle replication fails with: response_code=204 The search-head fails to retrieve results from some/all search-peers and emits messages like so on the UI: "Problem... by drrushi_splunk Splunk Employee in Deployment Architecture 08-07-2014 3 1	3	1
Splunk DB Connect Only Indexing Partial Value Of Fields With A Space In The Value I'm using Splunk DB Connect to monitor a mysql view. The query outputs the data like so: mid=0001 ext_src=My Source... by jpass Contributor in Deployment Architecture 08-07-2014 2 2	2	2
What search head is associated with a search peer? From a distributed search peer, is there a way to see which search heads are associated with it? by cphair Builder in Deployment Architecture 08-05-2014 0 6	0	6
Cluster Master unable to send bundles to slave-apps directory on cluster peers The cluster master and cluster peers are fully set up and were successfully communicating. After upgrading all instan... by katelynengel Explorer in Deployment Architecture 08-04-2014 0 6	0	6
In a clustered deployment, can you reference the master node by a DNS name instead of an IP? Eg, if you specify the master as master.domain.local? This may be a silly question but will it cause any issues? The ... by kdoonan Explorer in Deployment Architecture 08-01-2014 1 1	1	1
How would someone set Splunk environment variables in Windows How would someone set Splunk environment variables in Windows? Similar to the Linux command: source /opt/splunk/bin/... by bwooden Splunk Employee in Deployment Architecture 08-01-2014 3 2	3	2
Run 2 Instances of Splunk on Same Server I'm fairly certian you can run 2 instnaces of Splunk on the same server. What are some of the configurations I need t... by andrewkenth Communicator in Deployment Architecture 07-31-2014 0 5	0	5
Help configuring Splunk Mobile Access Server, no session key available?? Hi Team, Need some help as I followed these steps . When I try to configure the mobile server using these instructi... by markliam10 Explorer in Deployment Architecture 07-31-2014 0 4	0	4
Microsoft SQL Server App I followed the instructions for installation of the MS SQL Server App and I have some data in the dashboard. However,... by louieb3 Path Finder in Deployment Architecture 07-31-2014 0 1	0	1
Splunk forwarder Does the app use the Splunk forwarder? by softek Explorer in Deployment Architecture 07-31-2014 0 1	0	1
Distributed Summary indexing - Search head and indexer on 4.2 Hai there, How do have to deal with this on 4.2? Cause in 4.2 you have to run the search head as a member of the poo... by Starlette Contributor in Deployment Architecture 07-29-2014 0 2	0	2