Deployment Architecture

Community Activity

Multisite deployment with indexers and search heads on the same machine Initially we were going to go with a standalone single Splunk server, but we have a requirement for a DR strategy, an... by laithmurad Path Finder in Deployment Architecture 05-27-2014 0 1	0	1
deploymentclient.conf Hi, In our infrastructure (splunk 6.0.3) we have a deployment server and several indexers. One of my indexers is not ... by ArberBabi New Member in Deployment Architecture 05-27-2014 0 4	0	4
Heavy forward filter in udp port Hi, i use heavy forward setting data input port:514 and index=abcd after setting Forwarding and receiving » Forward... by chengyu Path Finder in Deployment Architecture 05-26-2014 0 1	0	1
Clean up deployment config: splitting serverclass.conf Greetings, all. This isn't a big deal, but is there some kind of #include directive you could use in, say, servercla... by bwakely Explorer in Deployment Architecture 05-23-2014 0 2	0	2
db connect on heavy forwarder Hi, I want to use db connect to pull in data from a heavy forwarder and route it to a set of indexers. Is there a w... by a212830 Champion in Deployment Architecture 05-22-2014 0 1	0	1
Splunk 6.1 multi-site cluster not replicating or working as intended? Hi, I moved to a multi-site cluster yesterday and I'm not entirely sure that replication is actually working within ... by 1StopBloke Explorer in Deployment Architecture 05-21-2014 1 2	1	2
Supported Product and Firewall Version My checkpoint management server is not on the list of supported products and versions, I would like to re-confirm if ... by paulchan_ageas Explorer in Deployment Architecture 05-20-2014 0 4	0	4
Splunk 5.x Cluster Manager restart results in 100% search outage Do you have Splunk 5.0, 5.0.1 or 5.0.2 and have chosen to run clustered peers? I bet you've noticed that when you ha... by davidpaper Contributor in Deployment Architecture 05-20-2014 4 2	4	2
Splunk Cluster Buckets I understand that the hot/warm/cold buckets need the same same storage characteristics for performance. However, is t... by adrianathome Communicator in Deployment Architecture 05-20-2014 0 4	0	4
Migrate from non-clustered index to clustered index Is anyone familiar with or has tried migrating buckets from a non-clustered index to a clustered index? by alanwill Explorer in Deployment Architecture 05-19-2014 0 1	0	1
application space usage Hello there ! Can anyone tell how can i find storage/space used on splunk for specific server (e.g Windows AD or Exc... by blebit Path Finder in Deployment Architecture 05-19-2014 0 2	0	2
Identifying bottlenecks on indexers and search head Hi all, I've been tasked with detailing information about our Splunk indexer and search head machines that shows the... by bruceclarke Contributor in Deployment Architecture 05-19-2014 0 1	0	1
bundle replication taking too long I have messages like the one below on a regular basis on my deployment server. Is there any way to determine what bu... by EricPartington Communicator in Deployment Architecture 05-15-2014 3 2	3	2
Splunk data backup and restore Hi, My splunk server has been crashed and now I need to reinstall it. But I want to take backup of existing data pre... by rameshlpatel Communicator in Deployment Architecture 05-15-2014 0 1	0	1
Procedure for Shutting Down a Fully Distributed Environment? Suppose you have a fully distributed environment. A search head pool, Indexer Cluster, Intermediate Forwarders, Licen... by muebel SplunkTrust in Deployment Architecture 05-14-2014 0 1	0	1
Estimating size of index Hi, I have been looking for how to calculate the range of index file in Splunk. I wrote the math according to the fo... by lzhang_soliton Path Finder in Deployment Architecture 05-13-2014 0 3	0	3
How to estimate the splunk storage size I will be feeding in 10 GB per day to 2 splunk indexers (clustered environment) Replication Factor = 2 Searchable Fac... by ajaysamantbms Explorer in Deployment Architecture 05-12-2014 1 3	1	3
Cannot set maxThreads and maxSockets to -1 in server.conf despite what server.conf.spec says With version 6.0 these parameters, it restricted the amount of file open. when i changed server.conf to [httpServer... by tlow Explorer in Deployment Architecture 05-12-2014 1 6	1	6
forwarding existing events Think I'm having duh-moment... I thought I could configure a new instance of Splunk, set it to receive, then configur... by Michael Contributor in Deployment Architecture 05-12-2014 0 3	0	3
sizing of master node in cluster? is it same as peer nodes i am about to define hardware configuration for setting up splunk cluster on AWS. I know peer nodes have to be high ... by ajaysamantbms Explorer in Deployment Architecture 05-09-2014 0 2	0	2
can not see hosts in indexer I have installed the universal forwarder on a server and would like the indexer to see the host. I ran a netstat -nap... by RuthBishop New Member in Deployment Architecture 05-08-2014 0 1	0	1
How do I group similar values in fields throughout all events together? From a human standpoint, we realize that there are effectively two groups of data here in the "Serial" field. One sta... by thisissplunk Builder in Deployment Architecture 05-08-2014 0 5	0	5
Collect data from remotely located application server I am new to splunk My project requirement is to gather log files from remotely located application server(jsfrolling ... by swapnilpingle New Member in Deployment Architecture 05-07-2014 0 1	0	1
What are the unnecessary apps that ship by default with standard Splunk installation? I want to clean up my distribution for deployment and would like to know which apps are unnecessary for my deployment... by the_wolverine Champion in Deployment Architecture 05-06-2014 0 5	0	5
How do you enable Forwarder Mangement? Hi, I have a new install of Splunk 6.0.3 on Mac OSX 9.2. When I try to use Forwarder management, all I get os a scre... by rickwylie New Member in Deployment Architecture 05-05-2014 0 5	0	5