| Can anyone provide a simple stanza example for a 30 day retention in the indexes under 4.2.3, where: Hot/Warm for 10... by kwaingrow Path Finder in Deployment Architecture 11-01-2012 0 12 | 0 | 12 | ||
| We currently have two dedicated search heads that have been running well but would like to move to a number of HA VMs... by sonicZ Contributor in Deployment Architecture 10-31-2012 0 3 | 0 | 3 | ||
| Is this as easy to do as it seems, or are there any issues I need to pay attention to? by Steve_G_ Splunk Employee 1 2 | 1 | 2 | ||
| Does replicated data count against my license? Are there any other issues with clusters and licensing? by Steve_G_ Splunk Employee 1 1 | 1 | 1 | ||
| So, where are the docs on clusters, anyways? by Steve_G_ Splunk Employee 1 1 | 1 | 1 | ||
| Hi there, at the moment I am using a Deployment Server which is also the SearchHead. Forwarders were installed auto... by nebel Communicator in Deployment Architecture 10-29-2012 0 2 | 0 | 2 | ||
| Is the component in _internal dropped for the deployment clients connects ( component DeploymenServer) ? I believe t... by Starlette Contributor in Deployment Architecture 10-25-2012 0 4 | 0 | 4 | ||
| I am migrating to a new architecture with my Splunk implementation. In this change I will be creating a new Deploymen... by rgcurry Contributor in Deployment Architecture 10-25-2012 2 3 | 2 | 3 | ||
| Hi, I'm using the deployment server to deploy, among other things, props.conf files to indexers. I'm a bit concerned... by echalex Builder in Deployment Architecture 10-25-2012 0 4 | 0 | 4 | ||
| Hello! This question is probably trivial (I'm a newbie) but I just don't seem to be able to adjust my head to think ... by peksalli Engager in Deployment Architecture 10-25-2012 1 3 | 1 | 3 | ||
| Hi, I was wondering how harmful is it to get near that limit in a single search query? If some of my searches take m... by Yarsa Path Finder in Deployment Architecture 10-23-2012 0 2 | 0 | 2 | ||
| Hello I am trying to calculate the data on the basis of "next.breachtime" field in data. I need to create 4 fields w... by theouhuios Motivator in Deployment Architecture 10-22-2012 0 1 | 0 | 1 | ||
| If the receiving Splunk is down for some time, would Universal Forwarder keep sending and the data would be lost or i... by yg Explorer in Deployment Architecture 10-19-2012 1 1 | 1 | 1 | ||
| With Splunk, I am trying to process around 3GB of data with "continuous monitor directory" option where files (apprx ... by sonunarula New Member in Deployment Architecture 10-18-2012 0 5 | 0 | 5 | ||
| When we first rolled out Splunk, the deployment server was not used. Its been a while now & I want to move to a depl... by kholleran Communicator in Deployment Architecture 10-17-2012 0 2 | 0 | 2 | ||
| Hi, I am trying to start using the Deployment Server in Splunk to manage my enterprise of a single indexer & about 1... by kholleran Communicator in Deployment Architecture 10-16-2012 0 3 | 0 | 3 | ||
| I was wondering if it was possible to delete reports I've uploaded in the Nessus app? I have about 5 reports that hav... by eafitt Path Finder in Deployment Architecture 10-16-2012 0 2 | 0 | 2 | ||
| How can I rotate all Hot and Warm Buckets older than 30 days into Cold storage? I would like to do this as I have li... by Steven_McGrath Engager in Deployment Architecture 10-16-2012 2 3 | 2 | 3 | ||
| Hello All, I have one question in distributed search processing. I have one dedicated search head which gathers data... by mehal New Member in Deployment Architecture 10-15-2012 0 2 | 0 | 2 | ||
| Hi, I am doing a major overhaul of our Splunk infrastructure from a clone pair of standalone indexers to a multi-ind... by Glenn Builder in Deployment Architecture 10-15-2012 5 3 | 5 | 3 | ||
| I have some deployment logs on unix machine. I copy these logs and put it on my machine where splunk is installed. Ho... by macwin Explorer in Deployment Architecture 10-12-2012 0 6 | 0 | 6 | ||
| Hi, I want to update the apps from my main server called A to client B without installing the apps and then install ... by rduro New Member in Deployment Architecture 10-11-2012 0 2 | 0 | 2 | ||
| Hi, Is it possible to validate audit events from a search head on search peers? index=_audit splunk_server="host" |... by ephemeric Contributor in Deployment Architecture 10-11-2012 0 4 | 0 | 4 | ||
| Hi, My main index is stored in two locations depending on whether its a cold bucket or a hot/warm bucket. I set asid... by romantercero Path Finder in Deployment Architecture 10-10-2012 0 6 | 0 | 6 | ||
| Hello, I am new to Splunk and I fall into every trap. I have configured UF on a Linux server to monitor /var/log/sa... by bdegoy New Member in Deployment Architecture 10-09-2012 0 6 | 0 | 6 |