Deployment Architecture

Community Activity

Error when sending windows events to splunk enterprise using powershell I am trying to send events from my host machine to splunk using HEC.My Function:Invoke-RestMethod -Method Post -Uri $... by 991423214 New Member in Deployment Architecture 09-24-2023 0 1	0	1
splunk bootstrap shcluster-captain - getting Invalid uri in servers list “https://##.###.##.191:8089 [root@splunk-search-head-1 bin]# ./splunk bootstrap shcluster-captain -servers_list “https://##.###.##.191:8089,https... by mofsplunk1 Observer in Deployment Architecture 09-24-2023 0 3	0	3
uncategorised.log file filling up /var in a Splunk Deployment Server Hello Splunk community,I have an issue with a Splunk Deployment Server where FS /var is of size 30Gb and currently 22... by gtrejos007 Engager in Deployment Architecture 09-22-2023 0 1	0	1
Indexer server performance vs indexer cluster Hi Everybody,Could you pls explain which works faster - to have 1 indexer server, high performance (48CPU, 128GB) or ... by Adpafer Loves-to-Learn Everything in Deployment Architecture 09-22-2023 0 2	0	2
Why Search Head Clustering is always show pending? Some Search Heads show "Up" status but other search heads are always show "Pending". I want to know that how to solve... by Beginner2 Observer in Deployment Architecture 09-21-2023 0 0	0	0
Why Search Head in a Search Head Cluster is in manual detention, but still taking searches? I need to upgrade a Search Head Cluster from 7.3.4 to 8.1.9 and I have run the first two commands: splunk upgrade-ini... by BlueSocket Contributor in Deployment Architecture 09-21-2023 0 5	0	5
Why is my license not showing data getting ingested? Hello All, Im having an issue where my license has stopped showing that any data is getting ingested. The data is sti... by CyberGuy1033 Engager in Deployment Architecture 09-20-2023 0 1	0	1
Rebuilding a Splunk Search Head ? If a Splunk Search Head image is destroyed, but the rest of the servers/components are up and running including the D... by CyberGuy1033 Engager in Deployment Architecture 09-20-2023 0 2	0	2
How to get an answer from search command in Splunk Enterprise? Hi, Splunk has been working for a long period without any trouble. When I changed settings yesterday (can't remember ... by gjhaaland Explorer in Deployment Architecture 09-19-2023 0 6	0	6
Configurations for a "baseline" + "updates" type index Hi,I'm trying to figure out the most recommended way to set up an index that stores data ingested in the following ma... by cplunk Explorer in Deployment Architecture 09-19-2023 0 0	0	0
Why Can't I connect to heavy forwarder GUI? I am getting a 500 internal server error when I try to connect to the HF GUI. I ran firewall-cmd --list-ports, and it... by jmrubio Path Finder in Deployment Architecture 09-18-2023 0 9	0	9
Where to reallocate CPU cores, SH or IDX? Our Splunk environment is chronically under resourced, so we see a lot of this message:[umechujf,umechujs] Configurat... by DaClyde Contributor in Deployment Architecture 09-15-2023 0 4	0	4
Splunk Alert: DMC Alert Total License Usage 90% Near Daily Quota My splunk index have a trouble Total License Usage 90% Near Daily Quotahow to solve it pls ? by minhquannguyen7 Engager in Deployment Architecture 09-15-2023 0 1	0	1
How to find list of servers not managed by deployment server but transmitting data to Splunk Hi, Can anyone please help advise there is any quick way to find list of servers not managed by deployment server but... by Manish_Sharma Engager in Deployment Architecture 09-14-2023 0 1	0	1
How to replicate the data to use the predict command? Hello Team, I need to use the predict command but currently i have only 110 data events therefore to have more data p... by gemrose Explorer in Deployment Architecture 09-14-2023 0 0	0	0
How to create search for Multi-tenant? We are running Splunk ES and trying to make log search and app interfaces for each company. Let's call them Comp... by gmbdrj Loves-to-Learn Lots in Deployment Architecture 09-13-2023 0 1	0	1
Why is deployer pushing ALL apps to SHC each time I apply shcluster bundle? Hi, We have upgraded from version 8.1.6 to version 9.0.1 recently and have discovered a new problem not seen before. ... by erw550 Path Finder in Deployment Architecture 09-10-2023 1 11	1	11
Search Head Clustering not working properly Hi,HTTP 503 Service Unavailable -- {"messages":[{"type":"ERROR","text":"This node is not the captain of the search he... by syazwani Path Finder in Deployment Architecture 09-08-2023 0 0	0	0
Splunk HTTP Event Collector intermittently sending "Server is busy" ExampleERROR HttpInputDataHandler [7000 HttpDedicatedIoThread-1] - Failed processing http input, token name=hec-token... by hrawat Splunk Employee in Deployment Architecture 09-06-2023 0 1	0	1
Automatic replication of lookup to indexer Dear Splunkers,actual i am facing an issue, we have an Lookup on the SHC with some location infromation e.g location.... by derchrischkya Engager in Deployment Architecture 09-06-2023 0 1	0	1
Search Head Deployer create .splunk folder in home directory When pushing a shcluster bundle as our sudo splunk user, I got the following message: Can't create directory "/home... by vicvaughan Explorer in Deployment Architecture 09-06-2023 0 2	0	2
Splunk UBA manager i got this error failed to: delete_local_spark_dirs on and failed to:force_kill_spark_jvms on when i run /opt/caspida... by YJ Explorer in Deployment Architecture 09-04-2023 0 0	0	0
How to Un-mount old frozen directory and re-mount new frozen directory? Hello,Currently we have an NFS drive which is mounted on /opt/archive directorySplunk indexer installation is in Red ... by khaizercruz Loves-to-Learn Lots in Deployment Architecture 09-04-2023 0 1	0	1
Deployment Was given the incorrect information on last post.Our Splunk is On-Prem and we want to migrate to the Cloud. Will we b... by BrC_Sys99 Loves-to-Learn in Deployment Architecture 09-02-2023 0 2	0	2
Splunk app to local copy from Cloud Our network team is using Splunk in the cloud however they asked me to see if it was possible to create a local copy ... by BrC_Sys99 Loves-to-Learn in Deployment Architecture 09-01-2023 0 1	0	1