Deployment Architecture

Community Activity

Extreme latency with indexed events With about 200 Heavy Forwarder sending data to four indexers. All Heavy Forwarders are Splunk Version 5.0.2 and Ind... by rbal_splunk Splunk Employee in Deployment Architecture 05-03-2014 0 1	0	1
Maximum deployment clients for a deployment server Hi, The deployment server Hardware specifications are as follows: 4 CPU 8GB RAM What might be the maximum deploymen... by aish Engager in Deployment Architecture 05-02-2014 0 1	0	1
Can the replication factor be set per index? In a clustered configuration, is it possible to set different replication factors per index? This could come in hand... by Lowell Super Champion in Deployment Architecture 05-01-2014 2 1	2	1
SOAPException: faultCode=SOAP-ENV:Client from running the was_jmxperf.bat Doing a POC to evaluate, if Splunk is the answer to our open issues. I have WAS7 and Splunk Trial installed on my mac... by aparnarustagi Engager in Deployment Architecture 04-30-2014 1 1	1	1
Search Head Pool and Clustering Are cluster configuration and search head pooling compatible? In other words, can one configure a master node that re... by kenmcgarrahan Explorer in Deployment Architecture 04-30-2014 3 1	3	1
Capture the account/user under which splunk services are running on linux Is there any way to find out which user/service account is running the splunk services on linux? I am looking to col... by somesoni2 Revered Legend in Deployment Architecture 04-29-2014 0 3	0	3
Google Maps - Where to install We have our search heads pooled in batches of 4. I installed Google Maps into the shared application directory and ha... by pkeller Contributor in Deployment Architecture 04-28-2014 1 4	1	4
Can we deploy, using deployment server, an app with state disabled? Hi There, I have a failover instance of Splunk and an app with scheduled searches with summary indexing enabled. My ... by somesoni2 Revered Legend in Deployment Architecture 04-25-2014 0 2	0	2
CHARSET does not effect when data is from a universalforwarder? Let indexer monitor a local file, CHARSET in props.conf works But if the same file was delivered by an universalforwa... by crazyeva Contributor in Deployment Architecture 04-24-2014 0 2	0	2
Re-indexing cold data We have some year old cold data that has been restored from tape. We would like to re-index and search this data. W... by loatswil Path Finder in Deployment Architecture 04-23-2014 0 1	0	1
Self Signed SSL Certificate problem in Amazon EC2 (works in lab) I am unable to get forwarder <> indexer SSL communication to work in Amazon AWS EC2. I would appreciate any help of... by JoshSupport Engager in Deployment Architecture 04-22-2014 1 2	1	2
data from remote hosts I wish to ingest events from a large number of remote hosts. I cannot install any Splunk infrastructure on these host... by pezcrap Explorer in Deployment Architecture 04-21-2014 0 2	0	2
Search Head Pooling Replicate Bundle Greetz, Must one use mounted bundles with search head pooling? I would like to enable search head pooling with mini... by ephemeric Contributor in Deployment Architecture 04-21-2014 3 5	3	5
Splunk Cluster Master Peer Handler Error 04-14-2014 13:03:09.199 -0700 ERROR ClusterMasterPeerHandler - Cannot add peer=x.x.x.x mgmtport=8089 (reason: non-zer... by tprzelom Path Finder in Deployment Architecture 04-17-2014 2 1	2	1
deployment fails from the second time. Is there any idea for following situation? When the number of UF is beyond about 268, deployment fails from the secon... by HiroshiSatoh Champion in Deployment Architecture 04-17-2014 1 2	1	2
Splunk 6 RTO in cluster environment Where do you install the real-time output app within a clustered environment, search head or indexers? Thanks! by hopnscotch Path Finder in Deployment Architecture 04-16-2014 0 7	0	7
How to restart Cluster? Hi, I need to upgrade OS Patch and need to restart the host (server). I have a cluster with one master node and two ... by aish Engager in Deployment Architecture 04-15-2014 0 3	0	3
Forwarder Management - Duplicated hosts Recently I looked at the Forwarder Management page, and selected the "Phone Home: Later than Expected". A large numb... by mikelanghorst Motivator in Deployment Architecture 04-12-2014 0 2	0	2
How to force a forwarder to only appear once on the forwarder management screen. No luck the last time I asked this question, so thought I would try again. Is there any way to have only one entry p... by RVDowning Contributor in Deployment Architecture 04-12-2014 0 7	0	7
Does the forwarder installation path affects its configuration? Does the forwarder installtion path affects its configuration by Rukmani_Splunk Path Finder in Deployment Architecture 04-10-2014 0 4	0	4
search heads recognizing indexes in a clustered environment in my cluster i've setup the master and search peers and have the neccessary "master-apps" and "slave-apps" directori... by sonicZ Contributor in Deployment Architecture 04-09-2014 0 1	0	1
How to forward filtered events from Splunk to another Splunk receiver Hi everyone, I'm looking for a solution to forward some events to another Splunk Server. I need to forward specific ... by gblondeau New Member in Deployment Architecture 04-08-2014 0 3	0	3
DB Connect - access restrictions to database connections not working I'm trying to set up db connections with role-based access restrictions. As an example, Splunk role A shall be able t... by martin_mueller SplunkTrust in Deployment Architecture 04-03-2014 0 7	0	7
How to keep only 3 months of logs in Splunk I would be creating a backup routine, which keep only 3 months of logs in Splunk. But how can I do to limit the amoun... by felipesewaybric Contributor in Deployment Architecture 04-03-2014 0 1	0	1
apply cluster-bundle Hi Taking a cluster peer out of the cluster with the "offline" command works great (version 5.0.2). The entire clust... by mathu Path Finder in Deployment Architecture 04-02-2014 3 9	3	9