Deployment Architecture

Community Activity

How to estimate the splunk storage size I will be feeding in 10 GB per day to 2 splunk indexers (clustered environment) Replication Factor = 2 Searchable Fac... by ajaysamantbms Explorer in Deployment Architecture 05-12-2014 1 3	1	3
Cannot set maxThreads and maxSockets to -1 in server.conf despite what server.conf.spec says With version 6.0 these parameters, it restricted the amount of file open. when i changed server.conf to [httpServer... by tlow Explorer in Deployment Architecture 05-12-2014 1 6	1	6
forwarding existing events Think I'm having duh-moment... I thought I could configure a new instance of Splunk, set it to receive, then configur... by Michael Contributor in Deployment Architecture 05-12-2014 0 3	0	3
sizing of master node in cluster? is it same as peer nodes i am about to define hardware configuration for setting up splunk cluster on AWS. I know peer nodes have to be high ... by ajaysamantbms Explorer in Deployment Architecture 05-09-2014 0 2	0	2
can not see hosts in indexer I have installed the universal forwarder on a server and would like the indexer to see the host. I ran a netstat -nap... by RuthBishop New Member in Deployment Architecture 05-08-2014 0 1	0	1
How do I group similar values in fields throughout all events together? From a human standpoint, we realize that there are effectively two groups of data here in the "Serial" field. One sta... by thisissplunk Builder in Deployment Architecture 05-08-2014 0 5	0	5
Collect data from remotely located application server I am new to splunk My project requirement is to gather log files from remotely located application server(jsfrolling ... by swapnilpingle New Member in Deployment Architecture 05-07-2014 0 1	0	1
What are the unnecessary apps that ship by default with standard Splunk installation? I want to clean up my distribution for deployment and would like to know which apps are unnecessary for my deployment... by the_wolverine Champion in Deployment Architecture 05-06-2014 0 5	0	5
How do you enable Forwarder Mangement? Hi, I have a new install of Splunk 6.0.3 on Mac OSX 9.2. When I try to use Forwarder management, all I get os a scre... by rickwylie New Member in Deployment Architecture 05-05-2014 0 5	0	5
Deployment Architecture I've seen documentation that mult-tenated/silo-ed or a hierarchical architecture can be created with Splunk deploymen... by confma812 Explorer in Deployment Architecture 05-05-2014 0 7	0	7
Deployment Server - App deployment Context: Deploying apps via Deployment Server I have a deployment server where I have three splunk instances connec... by ppurokit Path Finder in Deployment Architecture 05-05-2014 0 1	0	1
Extreme latency with indexed events With about 200 Heavy Forwarder sending data to four indexers. All Heavy Forwarders are Splunk Version 5.0.2 and Ind... by rbal_splunk Splunk Employee in Deployment Architecture 05-03-2014 0 1	0	1
Maximum deployment clients for a deployment server Hi, The deployment server Hardware specifications are as follows: 4 CPU 8GB RAM What might be the maximum deploymen... by aish Engager in Deployment Architecture 05-02-2014 0 1	0	1
Can the replication factor be set per index? In a clustered configuration, is it possible to set different replication factors per index? This could come in hand... by Lowell Super Champion in Deployment Architecture 05-01-2014 2 1	2	1
SOAPException: faultCode=SOAP-ENV:Client from running the was_jmxperf.bat Doing a POC to evaluate, if Splunk is the answer to our open issues. I have WAS7 and Splunk Trial installed on my mac... by aparnarustagi Engager in Deployment Architecture 04-30-2014 1 1	1	1
Search Head Pool and Clustering Are cluster configuration and search head pooling compatible? In other words, can one configure a master node that re... by kenmcgarrahan Explorer in Deployment Architecture 04-30-2014 3 1	3	1
Capture the account/user under which splunk services are running on linux Is there any way to find out which user/service account is running the splunk services on linux? I am looking to col... by somesoni2 Revered Legend in Deployment Architecture 04-29-2014 0 3	0	3
Google Maps - Where to install We have our search heads pooled in batches of 4. I installed Google Maps into the shared application directory and ha... by pkeller Contributor in Deployment Architecture 04-28-2014 1 4	1	4
Can we deploy, using deployment server, an app with state disabled? Hi There, I have a failover instance of Splunk and an app with scheduled searches with summary indexing enabled. My ... by somesoni2 Revered Legend in Deployment Architecture 04-25-2014 0 2	0	2
CHARSET does not effect when data is from a universalforwarder? Let indexer monitor a local file, CHARSET in props.conf works But if the same file was delivered by an universalforwa... by crazyeva Contributor in Deployment Architecture 04-24-2014 0 2	0	2
Re-indexing cold data We have some year old cold data that has been restored from tape. We would like to re-index and search this data. W... by loatswil Path Finder in Deployment Architecture 04-23-2014 0 1	0	1
Self Signed SSL Certificate problem in Amazon EC2 (works in lab) I am unable to get forwarder <> indexer SSL communication to work in Amazon AWS EC2. I would appreciate any help of... by JoshSupport Engager in Deployment Architecture 04-22-2014 1 2	1	2
data from remote hosts I wish to ingest events from a large number of remote hosts. I cannot install any Splunk infrastructure on these host... by pezcrap Explorer in Deployment Architecture 04-21-2014 0 2	0	2
Search Head Pooling Replicate Bundle Greetz, Must one use mounted bundles with search head pooling? I would like to enable search head pooling with mini... by ephemeric Contributor in Deployment Architecture 04-21-2014 3 5	3	5
Splunk Cluster Master Peer Handler Error 04-14-2014 13:03:09.199 -0700 ERROR ClusterMasterPeerHandler - Cannot add peer=x.x.x.x mgmtport=8089 (reason: non-zer... by tprzelom Path Finder in Deployment Architecture 04-17-2014 2 1	2	1