Deployment Architecture

Deployment Architecture
Community Activity
martaBenedetti
Hi community, I've just performed an upgrade on my infrastructure (distributed environment) from Splunk 8.2.3 to Splu...
by martaBenedetti Path Finder in Deployment Architecture 08-28-2023
0 6
0
6
ucorral
Actually I have an on-prem instance of Splunk Enterprise installed locally, but for incident response we need to forw...
by ucorral Loves-to-Learn in Deployment Architecture 08-26-2023
0 1
0
1
Rohit
Hi All,  I am new to Splunk and joined this community seeking help.Request you to please help me getting my doubts cl...
by Rohit Engager in Deployment Architecture 08-24-2023
0 2
0
2
kaboom1
Hello all,I need some suggestions/recommendations about enlarging our splunk infra.What are the considerations of put...
by kaboom1 Explorer in Deployment Architecture 08-23-2023
0 2
0
2
saurabh0912
Hi,Wanted to know if its possible to create new  indexer cluster and add it as peers to the existing cluster to copy ...
by saurabh0912 Path Finder in Deployment Architecture 08-22-2023
0 4
0
4
myandow
We have a number of indexes that have a coldToFrozenDir specified with both maxTotalDataSizeMB and frozenTimePeriodIn...
by myandow Path Finder in Deployment Architecture 08-17-2023
0 4
0
4
davidhome
I've been away from Splunk for a few years and trying to catch up.  I noticed at .conf23 it was mentioned that Splunk...
by davidhome Engager in Deployment Architecture 08-16-2023
0 2
0
2
dapetersen
Looks like the issue is the buckets have not rolled yet is there any reasons we should not roll the bucket to fix the...
by dapetersen Loves-to-Learn Lots in Deployment Architecture 08-15-2023
0 0
0
0
tdeanesh
As mentioned in https://advisory.splunk.com/advisories/SVD-2023-0606 under "Mitigations and Workarounds" users can pr...
by tdeanesh Loves-to-Learn Lots in Deployment Architecture 08-10-2023
0 9
0
9
StuartMacL
A new entry appears every few days in the Forwarder Management area. Phone homes are only working for the latest entr...
by StuartMacL Path Finder in Deployment Architecture 08-09-2023
0 2
0
2
splunker9999
Hi, We are seeing replication status on search head captain and one of the search head has failed. Also we are seein...
by splunker9999 Path Finder in Deployment Architecture 08-07-2023
0 2
0
2
gabribot
Hello, I don't find the minimum supported version of the Splunk Universal Forwarder for indexer discovery capability....
by gabribot Explorer in Deployment Architecture 08-07-2023
0 3
0
3
splunkreal
Hello, we plan to try Kafka as data collector and we'd like to know if we should keep our HF to receive HEC inputs fo...
by splunkreal Influencer in Deployment Architecture 08-03-2023
0 1
0
1
PickleRick
Well, there's no good section for this so I'll just post it here. I'm trying to do some drawings using the stencils f...
by SplunkTrust SplunkTrust in Deployment Architecture 08-02-2023
0 1
0
1
feichinger
Hello we've been advised to "Disable the ability to process ANSI escape codes in terminal applications" and I honestl...
by feichinger Path Finder in Deployment Architecture 08-01-2023
1 5
1
5
bhilim
Can someone help me to check if any way to stop the scheduled excess bucket removal? Or anything that could speed up ...
by bhilim Loves-to-Learn Lots in Deployment Architecture 07-31-2023
0 3
0
3
javiergn
Hi all. I’ve got an interesting case:$Customer using on-prem fully s3-compliant storage: DELL ECSWhen restarting the ...
by javiergn Super Champion in Deployment Architecture 07-28-2023
0 0
0
0
wstefanczyk
I'm a new Splunk user. I created a new Powershell script and i don't know why Splunk runs it only once after reload...
by wstefanczyk Engager in Deployment Architecture 07-28-2023
0 2
0
2
Sudarshan77
Lets say my colddb space is 15TB  and volume datasize is 20TB as below (indexer.conf) what will be issues it may caus...
by Sudarshan77 Observer in Deployment Architecture 07-25-2023
0 3
0
3
jpillai
Hi all,I'm testing multisite indexer clustering with below configuration and found an undesired behaviour in the case...
by jpillai Path Finder in Deployment Architecture 07-23-2023
1 4
1
4
Vinesh93
We have a client that connected to Splunk Deployment server where we get an error "DC:DeploymentClient - channel=tena...
by Vinesh93 Explorer in Deployment Architecture 07-23-2023
0 9
0
9
adminpulse
Hi Splunk support,I recently added my second forwarder. Everything was perfectly done. Only one thing is, the newly a...
by adminpulse Loves-to-Learn Lots in Deployment Architecture 07-22-2023
0 7
0
7
jessyreg
Hello all, So, we ran into (yet) another issue with Splunk...We have provisioned:- 1 Cluster Manager/ Deployer- 2 ind...
by jessyreg Explorer in Deployment Architecture 07-21-2023
0 6
0
6
sylim_splunk
 We have a problem when users try to query a specific index. They can query all of other indexes from this role, but ...
by sylim_splunk Splunk Employee Splunk Employee in Deployment Architecture 07-19-2023
0 1
0
1
kgiri253
We are trying to push cluster bundle from cluster master to other indexers.We are getting the following error in the ...
by kgiri253 Explorer in Deployment Architecture 07-19-2023
0 1
0
1
Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...