Deployment Architecture

Deployment Architecture
Community Activity
mburgess97
 It's my understanding that the default frozenTimePeriodInSecs is 6 years.  I am confused about what this graph means...
by mburgess97 Path Finder in Deployment Architecture 10-17-2023
0 4
0
4
MichalG1
Hello Team,Pre staging environment (not production), a single server with 12 CPU + 24 GB or memory + raid0 nvme (2.5G...
by MichalG1 Path Finder in Deployment Architecture 10-16-2023
0 1
0
1
yoho
To rebalance data, splunk only offers you to rebalance one single index or all the indexes but there is no option to ...
by yoho Contributor in Deployment Architecture 10-14-2023
2 0
2
0
jbanAtSplunk
Hi, if we upgrade license to 500GB.What is best practice Hardware architecture (CPU +RAM) based and number of "N" Sea...
by jbanAtSplunk Communicator in Deployment Architecture 10-13-2023
0 6
0
6
jklingberg
We use the ansible-role-for-splunk framework found on GitHub: https://github.com/schneewe/ansible-role-for-splunkIt s...
by jklingberg Engager in Deployment Architecture 10-11-2023
0 0
0
0
jbgraca
Hi,I have created a custom app to implement ACME on search head cluster members with a script on bin folder that upda...
by jbgraca Explorer in Deployment Architecture 10-11-2023
0 3
0
3
AmithB
We have a few instances hosted in AWS that are extremely underutilized (single digit avg. cpu% for the 3 months.The A...
by AmithB Engager in Deployment Architecture 10-10-2023
0 3
0
3
AmithB
We have Splunk Heavy Forwarder running in a couple of different regions/accounts in AWS.We need to ingest the CloudWa...
by AmithB Engager in Deployment Architecture 10-10-2023
0 0
0
0
sigma
Hi all, I deployed Splunk and enabled indexer clustering.Then I created an index in master-apps and it has been repli...
by sigma Path Finder in Deployment Architecture 10-07-2023
0 2
0
2
BlueSparrow
I am working on setting up a third party evaluation of a new network management and security monitoring installation ...
by BlueSparrow New Member in Deployment Architecture 10-06-2023
0 1
0
1
tlam_splunk
After a Splunk crash, we are finding that there are a number of emptybucket-hot_v1_xxx in the /var/lib/... folder. Al...
by tlam_splunk Splunk Employee Splunk Employee in Deployment Architecture 10-06-2023
1 2
1
2
jalen1331
I had an issue with storage.  I was at another site for 2 weeks and we reached the max limit on our drive.  I had to ...
by jalen1331 Loves-to-Learn in Deployment Architecture 10-06-2023
0 2
0
2
inventsekar
Hi Splunkers... Assumptions... The HF we want to deploy.. it should be inside a DMZ network, the license master is ou...
by SplunkTrust SplunkTrust in Deployment Architecture 10-05-2023
0 5
0
5
jwalrath1
If I have a multisite architecture with site A and site B, can they live on different cloud environments and still ha...
by jwalrath1 Explorer in Deployment Architecture 10-04-2023
0 4
0
4
jwalrath1
I understand that there are 2 approved architectures for multi site search head clustering. One, where each site has ...
by jwalrath1 Explorer in Deployment Architecture 10-04-2023
0 2
0
2
dhernandez
Hello,I'm working with a Splunk cluster which has two slave peers and I need to disable an index on the Cluster Maste...
by dhernandez New Member in Deployment Architecture 10-03-2023
0 1
0
1
Harley
on isolated network/no internet access considered a transport network.  Is there a way to still use add ons/ apps?  
by Harley Engager in Deployment Architecture 10-03-2023
0 4
0
4
prasireddy
Hi Team ,In my Splunk Environment(Universal Forwarder) after updating SSL certificate I'm getting these error in Splu...
by prasireddy Explorer in Deployment Architecture 10-02-2023
0 1
0
1
felipesodre
Hi, and sorry if this question was already answered in any other thread. Thanks in advance for the help.I had an inde...
by felipesodre Path Finder in Deployment Architecture 10-01-2023
0 13
0
13
smith_
Hi Everyone,I've recently applied a blacklist file path regex to one of the apps inputs.conf in the serverclass on th...
by smith_ Builder in Deployment Architecture 09-26-2023
0 3
0
3
991423214
I am trying to send events from my host machine to splunk using HEC.My Function:Invoke-RestMethod -Method Post -Uri $...
by 991423214 New Member in Deployment Architecture 09-24-2023
0 1
0
1
mofsplunk1
[root@splunk-search-head-1 bin]# ./splunk bootstrap shcluster-captain -servers_list “https://##.###.##.191:8089,https...
by mofsplunk1 Observer in Deployment Architecture 09-24-2023
0 3
0
3
gtrejos007
Hello Splunk community,I have an issue with a Splunk Deployment Server where FS /var is of size 30Gb and currently 22...
by gtrejos007 Engager in Deployment Architecture 09-22-2023
0 1
0
1
Adpafer
Hi Everybody,Could you pls explain which works faster - to have 1 indexer server, high performance (48CPU, 128GB) or ...
by Adpafer Loves-to-Learn Everything in Deployment Architecture 09-22-2023
0 2
0
2
Beginner2
Some Search Heads show "Up" status but other search heads are always show "Pending". I want to know that how to solve...
by Beginner2 Observer in Deployment Architecture 09-21-2023
0 0
0
0
Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...