Deployment Architecture

Community Activity

Migrate an index All, Our current indexer is our of physical space. We mounted some storage and I'd like to move an index over to th... by daniel333 Builder in Deployment Architecture 01-03-2014 0 2	0	2
Indexing specific files inside a zip folder HI all , I want o index specific files inside a zip folder. Directory structure is like this. D:/Reports/abc.zip/x(... by lohit Path Finder in Deployment Architecture 01-02-2014 1 1	1	1
How to modify configuration of Universal Forwarders from the web interface. I feel like this may be a dumb question, but I have scoured the documentation and I must be missing something. I'm s... by neiljpeterson Communicator in Deployment Architecture 12-31-2013 0 2	0	2
After a Deployment Server outage, clients all reconnect at once. Any way to stop this? So our Deployment Server was down for some time, beyond that of the clients' checkin interval, and now that it is bac... by Jason Motivator in Deployment Architecture 12-28-2013 2 1	2	1
How to distribute TA_nix from deployment server Hi, I have multiple forwarders and indexers and have want linix server activites from them. So I have to deploy my... by rameshlpatel Communicator in Deployment Architecture 12-24-2013 0 4	0	4
Splunkforwarder 5.0 - TcpOutputProc - Cooked connection to ip=... timed out Ok, this is really weird (... and annoying  Deployed splunkforwarder 5.0 last night on 4 identical servers at 2 sit... by Ovi Path Finder in Deployment Architecture 12-24-2013 0 3	0	3
Splunk_TA_nix install from deployment server Hi, I have 9 universal forwarders where i want to install Splunk_TA_nix from deployment server. Please let me know ... by rameshlpatel Communicator in Deployment Architecture 12-23-2013 0 6	0	6
Is anyone using RAID 0 with index replication for redundancy? With the newer index replication feature (introduced in Splunk 5, which is noticeably more polished in Splunk 6), has... by Lowell Super Champion in Deployment Architecture 12-20-2013 5 2	5	2
Paused search-head job available after restarting splunk indexer? I want to confirm whether or not a paused job should continue after an indexer is restarted. Details: I have a sea... by the_wolverine Champion in Deployment Architecture 12-20-2013 1 1	1	1
Archiving of clustered indexes HI All, I have some concerns on archiving of logs of clustered indexes. 1.How to do archiving of clustered indexes ... by lohit Path Finder in Deployment Architecture 12-20-2013 0 1	0	1
External database I could not find an external database tool in splunk v5.0 by aryputra New Member in Deployment Architecture 12-19-2013 0 4	0	4
Universal Forwarder - setting maxKBps via cli I've looking around for a way to set maxKBps via cli. Most of the splunk answers suggest manually editing the limits... by mrjsnook New Member in Deployment Architecture 12-18-2013 0 1	0	1
Forward to Splunk indexer, then forwarded from Splunk server to another server If I were to forward syslog messages to a Splunk server and then from there forwarded to another server, would my sys... by sdorich Communicator in Deployment Architecture 12-18-2013 0 3	0	3
Is Splunk Supported on RHEL 6.4? We currently are running Splunk 5.0.3 and will probably be upgrading to 6 sometime in the future. Just need to know i... by tony_robbins Engager in Deployment Architecture 12-18-2013 0 2	0	2
Add hyperlink to one field in splunk DB query output I am using a Splunk DB connect to pull out list of some tickets which my team is working on. One of the field which c... by anoopambli Communicator in Deployment Architecture 12-18-2013 0 1	0	1
Search to find higher that expected volume from a UF I have a very simple question. I’m using one of the Deployment application search’s, which shows hosts with higher t... by kspill01 New Member in Deployment Architecture 12-17-2013 0 1	0	1
How to force deployment server to recognize specific forwarder IP address I appologize if this is a double post. I don't know what happened to my previous attemt  In my environment the ser... by working_dog Explorer in Deployment Architecture 12-14-2013 0 5	0	5
Deployment Server : Unable to deploy apps (Splunk 5.0.2) Unfortunately, i'm unable to get a forwarder app deployed using deployment Server. Below is what I' ve done till now ... by koshyk Super Champion in Deployment Architecture 12-13-2013 0 5	0	5
Serverclass.conf - Using the same app name under different classes and repositoryLocations now appears broken in v6.0 I've been trying to upgrade our Splunk v5.0.4 deployment server to v6.0. It appears that our existing serverclass is... by Lucas_K Motivator in Deployment Architecture 12-12-2013 1 1	1	1
merging content from two configuration files Is it possible to create 2 server classes - one server class contains input.conf file with only stanza A and stanza... by ajaysamantbms Explorer in Deployment Architecture 12-12-2013 0 4	0	4
Splunk index retention based on retention period only not size How do we ensure that only say 40 days of data is retained combined across all our buckets hot,warm,cold ....irrespe... by Mag2sub Path Finder in Deployment Architecture 12-12-2013 0 4	0	4
Sending updates to conf file using deployment server Is it possible to update only one stanza of a conf file (e.g inputs.conf) and not touch other parts of configuration.... by ajaysamantbms Explorer in Deployment Architecture 12-12-2013 0 1	0	1
Ver6のデプロイメントサーバ機能について Ver6でGUIからクライアントの変更ができるようになったようですが、各種設定ファイルの編集もGUIから可能ですか？マニュアルを読んでも記述がなかったようなので質問しました。よろしくお願いします。 by HiroshiSatoh Champion in Deployment Architecture 12-11-2013 0 3	0	3
Clustering and reassigning primaries issue We have 2 peers that each forwarder load balances between so there is roughly 50% of the primary data on each one. Th... by TONYBYERS Path Finder in Deployment Architecture 12-11-2013 1 5	1	5
Indexer shows multiple CLOSE_WAIT sessions on 9997 with forwarders. This is probably a follow up to the question asked 20 Mar '12, 02:49 by nebel. ERROR TcpInputProc - Error encountered... by sgrey007 New Member in Deployment Architecture 12-11-2013 0 1	0	1