Deployment Architecture

Community Activity

Ports need to be opened Hi, Any reference document which tells what port we need to open between various distributed components of Splunk Di... by nikhilmehra79 Path Finder in Deployment Architecture 02-24-2014 0 1	0	1
Deployment server and search head on the same box? In the "Architecting and Deploying Splunk" training course, there is the following comment on having a deployment ser... by lu9603 Engager in Deployment Architecture 02-24-2014 0 2	0	2
Red Hat Linux 9 I have an old version of Red Hat Linux 9 with snare installed. What version of splunk can I use to process the data c... by jtimthompson New Member in Deployment Architecture 02-21-2014 0 2	0	2
User migration to Search Head We have migrated from a single Indexer system to a Search Head + Indexer. All apps and users were copied to the Searc... by ruiaires Path Finder in Deployment Architecture 02-21-2014 0 1	0	1
ability to read remote files? Hi, Doe splunk has a built-in method for watching a directory on a remote server to look for new files to download a... by a212830 Champion in Deployment Architecture 02-21-2014 0 4	0	4
Can any search head be a search peer to some another search head, making data availability of its search peers on root search head I would like to create an environment where there is a central search head(say A) and various separate search heads a... by dishasaxena Path Finder in Deployment Architecture 02-21-2014 0 5	0	5
Can I get the instance.cfg GUID for an indexed event? Hi all I'm trying to deal with an issue where hostnames are not unique but are forwarding to the same Splunk indexer... by jimcroft Explorer in Deployment Architecture 02-20-2014 0 4	0	4
DB Connect Is Splunk DB Connect compatible with Enterprise trial license. by harshavrath Contributor in Deployment Architecture 02-19-2014 0 1	0	1
Was Forwarder Management silently removed for free Splunk licenses in Splunk 6.0.1? Yesterday I updated my private Splunk 6 instance to 6.0.1 and after the update the Forwarder Management did not work ... by peter_krammer Communicator in Deployment Architecture 02-19-2014 0 6	0	6
Possible typo in stanza (serverRepositoryLocationPolicy) Splunk 6.0.1 I'm trying to do this: http://docs.splunk.com/Documentation/Splunk/6.0.1/DistSearch/Deploymentserverandsearchheadpoo... by thslopes Explorer in Deployment Architecture 02-19-2014 0 1	0	1
Prevent test environment from breaching the whole license I have a license master with two pools, one pool is for my production instances and the second is for my testing envi... by vhallan_splunk Splunk Employee in Deployment Architecture 02-19-2014 1 1	1	1
How to auto-range with a descending percent manner For example, I want my data is ranged as: Value Percent Larger than 0 100% Larger than 5 ... by wait4amigo New Member in Deployment Architecture 02-18-2014 0 3	0	3
Increase retry frequency for Search Heads to connect with Search Peers We experience heavy search loads a few times a day. This can cause the Search Peers to drop from the Search Heads, re... by twinspop Influencer in Deployment Architecture 02-18-2014 0 4	0	4
How to deal with bucket sizes and retention policy I am fairly limited knowledge on buckets. I have one single storage drive available to me of 2 TB. And the retention ... by chaseatul Explorer in Deployment Architecture 02-18-2014 1 9	1	9
Splunk DB connect Host Field Value from DB hi I lately started to use Splunk db connect, and need to create an input that contains entries from different hosts... by pembleton Path Finder in Deployment Architecture 02-14-2014 1 7	1	7
Top User Access Query Hi, I want to make a search query on Linux which gives me a list of top 5 users who have accessed the linux machine ... by sourabh_v Explorer in Deployment Architecture 02-13-2014 0 1	0	1
splunk 6 forwarder headers? Hi, I seem to recall hearing about some new features in Splunk 6, where we can define "headers" that should be ignor... by a212830 Champion in Deployment Architecture 02-12-2014 0 6	0	6
How can I change index size in cluster ? Hello I wanted to increase the size of the index. My indexes are configured on multiple machines in a cluster. Where ... by mima_splunk Engager in Deployment Architecture 02-12-2014 1 1	1	1
Forwarders shows up in deployment monitor, but data is not searchable Hi I have some issues with my splunk enterprise installation. - I have some forwarders on redhat based hosts (with u... by maradibs New Member in Deployment Architecture 02-12-2014 0 7	0	7
Deployment monitor and intermediary forwarder Hi, We have set up a Splunk infrastructure where all forwarders send their data to intermediary forwarders (universa... by echalex Builder in Deployment Architecture 02-10-2014 2 2	2	2
Cluster replication and licensing I currently have a cluster deployed in a test environment (replication factor of 2). I've been reading some of the po... by pil321 Communicator in Deployment Architecture 02-08-2014 0 5	0	5
Index disappeared Yesterday, I created an index and set up the appropriate file inputs, which proceeded to slurp data into the index. W... by unclethan Path Finder in Deployment Architecture 02-07-2014 1 4	1	4
Deploy app to distributed search head Hi I'm trying to use the deployment server to deploy apps to my search head. The app is installed in $SPLUNK_HOME/e... by craigmunro Path Finder in Deployment Architecture 02-07-2014 1 3	1	3
Forward splunk app log from search head to the indexer within the same cluster Hi, I installed splunk add-on app on one of the search heads. The log generated by the add-on app needs to be forw... by shangshin Builder in Deployment Architecture 02-07-2014 0 4	0	4
Splunk Agent Status by Host Recently, the splunk agent has been down on various servers, and I'd like to set up an alert that tells us which serv... by _gkollias Builder in Deployment Architecture 02-06-2014 1 7	1	7