Deployment Architecture

Community Activity

Can any search head be a search peer to some another search head, making data availability of its search peers on root search head I would like to create an environment where there is a central search head(say A) and various separate search heads a... by dishasaxena Path Finder in Deployment Architecture 02-21-2014 0 5	0	5
Can I get the instance.cfg GUID for an indexed event? Hi all I'm trying to deal with an issue where hostnames are not unique but are forwarding to the same Splunk indexer... by jimcroft Explorer in Deployment Architecture 02-20-2014 0 4	0	4
DB Connect Is Splunk DB Connect compatible with Enterprise trial license. by harshavrath Contributor in Deployment Architecture 02-19-2014 0 1	0	1
Was Forwarder Management silently removed for free Splunk licenses in Splunk 6.0.1? Yesterday I updated my private Splunk 6 instance to 6.0.1 and after the update the Forwarder Management did not work ... by peter_krammer Communicator in Deployment Architecture 02-19-2014 0 6	0	6
Possible typo in stanza (serverRepositoryLocationPolicy) Splunk 6.0.1 I'm trying to do this: http://docs.splunk.com/Documentation/Splunk/6.0.1/DistSearch/Deploymentserverandsearchheadpoo... by thslopes Explorer in Deployment Architecture 02-19-2014 0 1	0	1
Prevent test environment from breaching the whole license I have a license master with two pools, one pool is for my production instances and the second is for my testing envi... by vhallan_splunk Splunk Employee in Deployment Architecture 02-19-2014 1 1	1	1
How to auto-range with a descending percent manner For example, I want my data is ranged as: Value Percent Larger than 0 100% Larger than 5 ... by wait4amigo New Member in Deployment Architecture 02-18-2014 0 3	0	3
Increase retry frequency for Search Heads to connect with Search Peers We experience heavy search loads a few times a day. This can cause the Search Peers to drop from the Search Heads, re... by twinspop Influencer in Deployment Architecture 02-18-2014 0 4	0	4
How to deal with bucket sizes and retention policy I am fairly limited knowledge on buckets. I have one single storage drive available to me of 2 TB. And the retention ... by chaseatul Explorer in Deployment Architecture 02-18-2014 1 9	1	9
Splunk DB connect Host Field Value from DB hi I lately started to use Splunk db connect, and need to create an input that contains entries from different hosts... by pembleton Path Finder in Deployment Architecture 02-14-2014 1 7	1	7
Top User Access Query Hi, I want to make a search query on Linux which gives me a list of top 5 users who have accessed the linux machine ... by sourabh_v Explorer in Deployment Architecture 02-13-2014 0 1	0	1
splunk 6 forwarder headers? Hi, I seem to recall hearing about some new features in Splunk 6, where we can define "headers" that should be ignor... by a212830 Champion in Deployment Architecture 02-12-2014 0 6	0	6
How can I change index size in cluster ? Hello I wanted to increase the size of the index. My indexes are configured on multiple machines in a cluster. Where ... by mima_splunk Engager in Deployment Architecture 02-12-2014 1 1	1	1
Forwarders shows up in deployment monitor, but data is not searchable Hi I have some issues with my splunk enterprise installation. - I have some forwarders on redhat based hosts (with u... by maradibs New Member in Deployment Architecture 02-12-2014 0 7	0	7
Deployment monitor and intermediary forwarder Hi, We have set up a Splunk infrastructure where all forwarders send their data to intermediary forwarders (universa... by echalex Builder in Deployment Architecture 02-10-2014 2 2	2	2
Cluster replication and licensing I currently have a cluster deployed in a test environment (replication factor of 2). I've been reading some of the po... by pil321 Communicator in Deployment Architecture 02-08-2014 0 5	0	5
Index disappeared Yesterday, I created an index and set up the appropriate file inputs, which proceeded to slurp data into the index. W... by unclethan Path Finder in Deployment Architecture 02-07-2014 1 4	1	4
Deploy app to distributed search head Hi I'm trying to use the deployment server to deploy apps to my search head. The app is installed in $SPLUNK_HOME/e... by craigmunro Path Finder in Deployment Architecture 02-07-2014 1 3	1	3
Forward splunk app log from search head to the indexer within the same cluster Hi, I installed splunk add-on app on one of the search heads. The log generated by the add-on app needs to be forw... by shangshin Builder in Deployment Architecture 02-07-2014 0 4	0	4
Splunk Agent Status by Host Recently, the splunk agent has been down on various servers, and I'd like to set up an alert that tells us which serv... by _gkollias Builder in Deployment Architecture 02-06-2014 1 7	1	7
connect with database how to connect splunk with mssql database.? can anybody help me in detail.? by Nikie Engager in Deployment Architecture 02-06-2014 0 2	0	2
Stop data flowing into 1 of my Indexes Is there a quick way to stop all data flowing into one of my indexes on a temp basis. I have a windowsec index that ... by rdelmark Explorer in Deployment Architecture 02-05-2014 0 1	0	1
Some Splunk client doesnt' see/load deployed apps config Hi, I setup a deployment server which works fine and deploy apps correctly. But some servers received the app (direc... by madsurfer Explorer in Deployment Architecture 02-05-2014 0 1	0	1
Adding a cluster peer: error Bad Request in handler clusterconfig While adding a peer node to the cluster master, I receive the error: Bad Request — In handler 'clusterconfig': Could... by ekost Splunk Employee in Deployment Architecture 02-04-2014 4 2	4	2
I am seeing a different behavior between in the GUI for v5 and v6 with regards to Index Replication. Is this right? On master $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf [test_web_access] repFactor=auto coldPath = $SP... by DerekB Splunk Employee in Deployment Architecture 02-03-2014 0 1	0	1