Deployment Architecture

Community Activity

DB Connect - access restrictions to database connections not working I'm trying to set up db connections with role-based access restrictions. As an example, Splunk role A shall be able t... by martin_mueller SplunkTrust in Deployment Architecture 04-03-2014 0 7	0	7
How to keep only 3 months of logs in Splunk I would be creating a backup routine, which keep only 3 months of logs in Splunk. But how can I do to limit the amoun... by felipesewaybric Contributor in Deployment Architecture 04-03-2014 0 1	0	1
apply cluster-bundle Hi Taking a cluster peer out of the cluster with the "offline" command works great (version 5.0.2). The entire clust... by mathu Path Finder in Deployment Architecture 04-02-2014 3 9	3	9
Index planning My company is just starting it's deployment of Splunk and one of the pieces of advice I've heard repeatedly from exis... by curtisb1024 Path Finder in Deployment Architecture 04-02-2014 3 5	3	5
What kind of support do we get from Splunk for deployment Hi Team, If we purchase a licensed version of Splunk, i wanted to know what kind of support do you provide for deplo... by harshal_chakran Builder in Deployment Architecture 04-02-2014 0 1	0	1
How can I restart all my forwarders? Splunk 6.0.1 (build 189883) on Windows 2012Splunk Universal Forwarder 6.0 (build 182611) on Windows 2008 mostly For ... by rune_hellem Contributor in Deployment Architecture 04-01-2014 0 2	0	2
Methods for managing Splunk installations remotely? Anyone used Git before? To manage a Splunk installation (Search head, indexers, forwarders etc) there is a lot of direct file manipulation in... by neiljpeterson Communicator in Deployment Architecture 03-31-2014 0 5	0	5
Forwarding events to custom index on Cluster peers My cluster peers have a cluster app with indexes.conf which have custom indexes defined Clustre bundle has been depl... by Mag2sub Path Finder in Deployment Architecture 03-31-2014 0 13	0	13
Can I insert/update my DB table with search result fields value through Splunk DB Connect? Hello, I'd like to insert or update my table on SQL Server with using search results through Splunk DB Connect. I d... by Suda Communicator in Deployment Architecture 03-29-2014 4 10	4	10
Editing search peer ip address I am in the process of setting up my Splunk 6.0.2 cluster here and when connecting to the master node it appears the ... by sonicZ Contributor in Deployment Architecture 03-28-2014 0 2	0	2
Archiving of Indexes Not Working We are running Splunk 6.0.1 on a Centos Linux virtual machine. The splunk application and indexes reside on a 200 GB... by jkfierro Explorer in Deployment Architecture 03-28-2014 0 3	0	3
Attributes to be set in distsearch.conf I read that the distsearch.conf is to configure only distributed search. In order to set the distributed search , I h... by username021 Explorer in Deployment Architecture 03-25-2014 0 1	0	1
Splunk high availability without data duplication Hi, We're putting in splunk in the next few months as a part of PCI compliance. I'm just getting the ball rolling an... by yspendiff1stop Explorer in Deployment Architecture 03-25-2014 8 5	8	5
Upload and index a file : server abort As a brand new user, I'm attempting to add several log files as input to my installation of splunk. These are server... by madmoravian New Member in Deployment Architecture 03-25-2014 0 8	0	8
Force forwarder to show up on forwarder manager screen Using 6.0, most of my forwarders show up on the Forwarder Management screen. However, my test machine does not. Is ... by RVDowning Contributor in Deployment Architecture 03-21-2014 0 1	0	1
Folks finding 6x as snappy as 5x? We have a pretty large (?) environment that we just upgraded from 5.0.5 to 6.0.2 and would anecdotally say 6 isn't qu... by Runals Motivator in Deployment Architecture 03-21-2014 2 3	2	3
can i restore data from bad indexer with the disk damaged ? I have 5 indexers,and one crushed with data partition damaged.As i know,forwarder data would be sent to these indexer... by zillionlee Path Finder in Deployment Architecture 03-21-2014 0 3	0	3
Index Large File Context: When attempting to index a massive log (>30GB) I am not seeing Splunk log percent complete, status, or erro... by rgaleone1 Path Finder in Deployment Architecture 03-20-2014 0 1	0	1
Deployment client not getting all matching deployment apps I have a handful of deployment clients which are not pulling an app which should match the hostname specified in the ... by chanfoli Builder in Deployment Architecture 03-19-2014 0 6	0	6
does the Cisco ASA TA get installed on the indexer or the search head? Hello, Does this TA get installed on the Indexer or the Search Head? by lbogle Contributor in Deployment Architecture 03-17-2014 0 2	0	2
Splunk Server Hi, If my Splunk is installed on an server & the server is down how will i tackle this problem in real time. Any he... by harshavrath Contributor in Deployment Architecture 03-17-2014 0 5	0	5
splunk index backup hello, can anyone help me with index backup? i want do make the script. by blebit Path Finder in Deployment Architecture 03-17-2014 0 1	0	1
Search peer has the following message: Failed to contact master: reason='Unable to connect to remote peer: Search peer has the following message: Failed to contact master: reason='Unable to connect to remote peer: https://:... by mcronkrite Splunk Employee in Deployment Architecture 03-15-2014 1 1	1	1
Hardware Requirements of a Deployment Server What are the hardware requirements of a deployment server? Does anyone have 1000+ devices connected to a deployment ... by aelliott Motivator in Deployment Architecture 03-14-2014 1 2	1	2
How to restart the Splunk servers in a deployment server env ? How to restart the Splunk servers in the below model Deployment server -1Search head -1Indexers -4Heavy forwarders ... by splunker12er Motivator in Deployment Architecture 03-14-2014 0 1	0	1