Deployment Architecture

Community Activity

Newly added forwarder not listing in clients (Forwarder management) Hi Splunk support,I recently added my second forwarder. Everything was perfectly done. Only one thing is, the newly a... by adminpulse Loves-to-Learn Lots in Deployment Architecture 07-22-2023 0 7	0	7
Make the master node return the FQDN of peers instead of IP Address Hello all, So, we ran into (yet) another issue with Splunk...We have provisioned:- 1 Cluster Manager/ Deployer- 2 ind... by jessyreg Explorer in Deployment Architecture 07-21-2023 0 6	0	6
We set up a new role, however users with the role are not able to access index We have a problem when users try to query a specific index. They can query all of other indexes from this role, but ... by sylim_splunk Splunk Employee in Deployment Architecture 07-19-2023 0 1	0	1
Getting error while pushing configuration bundle action from cluster master "[Critical] idx=ad_data_enrichment Volume s" We are trying to push cluster bundle from cluster master to other indexers.We are getting the following error in the ... by kgiri253 Explorer in Deployment Architecture 07-19-2023 0 1	0	1
Integration - On-Prem Splunk to Cloud WAF? Hi, Anyone tried having this kind of integration where an ON-prem Splunk will be integrated to a cloud waf? Cloud WAF... by leangfbiz Observer in Deployment Architecture 07-18-2023 0 0	0	0
Disabling KV store I wanted to read up on which roles does need the KV store, which might and wich do not. In theAdmin Manual under Abou... by e57dab30 Explorer in Deployment Architecture 07-18-2023 0 6	0	6
Splunk Migration from us-east1 to ca-central? Hi, We are in the process of migrating our indexes/alerts/reports/dashboards from us-east1 to ca-central1 and I would... by arisarenas New Member in Deployment Architecture 07-12-2023 0 1	0	1
Input.conf issue monitoring same directory multiple times I have a inputs.conf where it will monitor all the files from a folder [monitor:///mydata/my_folder/ToSplunk/*.(mylog... by Naa_Win Path Finder in Deployment Architecture 07-12-2023 0 3	0	3
Can't select timestamp field on DB Connect App? Hi, we are trying to configure a MSSQL query in DB Connect App. Some how we are not be able to select timestamp field... by AKG11 Path Finder in Deployment Architecture 07-11-2023 0 3	0	3
Getting a failed to join cluster error from an indexer after an inadvertent IP change (and change back), but the CM reports the indexer is joined and healthy. How to fix? Indexer was running normally yesterday. We offlined it, and after maintenance, rebooted it. When it came back up, it ... by twinspop Influencer in Deployment Architecture 07-07-2023 0 4	0	4
Failed to Register with Cluster Master WARN CMSlave - Failed to register with cluster master reason: failed method=POST path=/services/cluster/master/peers/... by venkateshparank Path Finder in Deployment Architecture 07-07-2023 0 6	0	6
Getting an Error setting up Clustering I am attempting to create a cluster but I am receiving an error when I attempt to add a peer (any peer for that matte... by rmcdougal Path Finder in Deployment Architecture 07-07-2023 1 14	1	14
[9.0.3+] Invalid file path /proc/1/cgroup while checking container status After upgrade from 8.2.4 to 9.0.4.1 forwarders connect to indexers then after the Indexer cluster gets stabilized. Al... by sylim_splunk Splunk Employee in Deployment Architecture 07-06-2023 0 1	0	1
How to get a list of search heads in my Splunk environment? Hi, I am relatively new to Splunk and I would like to know how to find out what are the number of "Search Heads" on m... by GeoCouloute Engager in Deployment Architecture 07-06-2023 0 6	0	6
Deployment Client Sending Logs to Backup Log Collector Hello, I have a question regarding forwarding and receiving in Splunk. Can I configure the deployment client to send ... by daniaabujuma Explorer in Deployment Architecture 07-06-2023 0 1	0	1
Change frozenTimePeriodInSecs of an existing indexes Hello Splunkers,I would like to change the value of frozenTimePeriodInSecs for one of my existing indexes.What should... by GaetanVP Contributor in Deployment Architecture 07-03-2023 0 2	0	2
What are my options to track the captain switch over time in a search head cluster? I have a 6 node Search Head Cluster deployment. What are my options to figure out the Captain switch over time? by rbal_splunk Splunk Employee in Deployment Architecture 07-03-2023 0 5	0	5
Is there a way for HF double forward to Splunk On-Prem and Cloud? Hi all, In our infrastructure we are integrating a heavy forwarder belonging to another company.We would need this HF... by miwasef Explorer in Deployment Architecture 06-29-2023 0 10	0	10
What is the max recommended of indexes on a single indexer in AWS? Hello Community, I am looking at deploying Splunk Enterprise on AWS on a HEFTY EC2 compute-optimized instance, and a... by kalibaba2021 Path Finder in Deployment Architecture 06-27-2023 0 6	0	6
How to delete a bucket stuck in "fixup tasks - In Progress" server side? Hello I currently have a bucket that is stuck in "fixup tasks - in progress" tab for a while. Is there any way to de... by santiagn Path Finder in Deployment Architecture 06-22-2023 2 2	2	2
Why does Search peer have the following message: Failed to make bucket = searchable? Hello, I'm checking a Splunk cluster install that has been working just fine for a while. However, a few weeks ago, w... by fbustamantes Explorer in Deployment Architecture 06-22-2023 1 4	1	4
How do I fix this error: WARN BucketReplicator - Failed to replicate Streaming bucket? We have 8-node indexer multi-site cluster with total of 2 sites (each site with 4 indexers) Site 1 -SITE1IDX01SITE1ID... by sagaraverma Loves-to-Learn Everything in Deployment Architecture 06-21-2023 0 9	0	9
Can someone point me to DLTK User Guide please? Can someone point me to DLTK User Guide please? by rneogi New Member in Deployment Architecture 06-20-2023 0 1	0	1
What is the difference between rb bucket and db bucket? Hi Splunker; What is the difference between rb_* and db_* under splunk_cold and splunk_hot directory storage? you ca... by aalhabbash1 Path Finder in Deployment Architecture 06-20-2023 2 2	2	2
What are all the ports to be opened for Splunk? Hi, Please let me know the ports to be open for splunk setup.1. Ports to be open ON Universal Forwarder2. Ports to be... by dhamumarch03 New Member in Deployment Architecture 06-19-2023 0 4	0	4