Deployment Architecture

Community Activity

AIX HACMP and shared storage log monitor Hi, is anyone doing this sort of configuration? AIX HACMP cluster with shared storage, log file is on shared storage.... by gts1999 Engager in Deployment Architecture 11-16-2011 1 2	1	2
Forwarder still forwarding to removed indexer I have a strange one. I'm migrating hosts to a different indexer to redistribute my workload. Last week from the co... by richard_whiffen Explorer in Deployment Architecture 11-15-2011 0 4	0	4
deployment client machine type I have a deployment server that I use to configure systems by MaichineType. I have windows-intel, windows-64x, linux... by hartfoml Motivator in Deployment Architecture 11-11-2011 0 2	0	2
Deployment server: 2nd install of Splunk on an indexer? When planning my Splunk deployment I didn't allow for a separate deployment server. My 2 indexers are quite brawny (1... by twinspop Influencer in Deployment Architecture 11-08-2011 2 2	2	2
How to convert audit.log data to usernames instead of user id numbers? I'm using the standard auditd in Linux to capture "permission denied" messages. For some odd reason, auditd likes to... by splukUP Engager in Deployment Architecture 11-08-2011 1 2	1	2
Unable to connect to remote splunk server I'm trying to run the splunk CLI client using a remote server uri. The remote server is live and listening on port 80... by cloudharmony Explorer in Deployment Architecture 11-05-2011 0 3	0	3
Any side-effect if directly delete the warm bucket? Dear all Since each warm bucket has its time span from earliest to latest, so if i wanna directly delete the warm bu... by hjwang Contributor in Deployment Architecture 10-30-2011 0 2	0	2
Searchhead pooling and scheduled searches. I'm running some tests with searchhead pooling and scheduled searches. I'm running a saved search every minute and t... by nocostk Communicator in Deployment Architecture 10-28-2011 3 2	3	2
fill_summary_index and pooling Hi, I'm attempting to fill in a summary index on a pooled search head, but the script is failing due to a path probl... by tgiles Path Finder in Deployment Architecture 10-28-2011 0 1	0	1
Is the restartSplunkd parameter honored when using Deployment Server and Search Head Pooling? I understand it is possible to use Deployment Server to propagate config changes to a Search Head Pool as documented ... by hulahoop Splunk Employee in Deployment Architecture 10-28-2011 1 3	1	3
Splunkweb login is not working I'm getting the error message above while trying to login the interface. In IE, the tab also reads Login - Splunk UNK... by mataharry Communicator in Deployment Architecture 10-27-2011 1 1	1	1
UF default setting Is it safe to deploy the UF with these settings? msiexec /i splunkforwarder64bit.msi RECEIVING_INDEXER="servername:9... by eantonio Path Finder in Deployment Architecture 10-26-2011 0 1	0	1
What are the main risks one should consider when deploying Splunk? Basically what to look out for when deploying splunk in all areas, resolved and unresolved issues Thanks by Dark_Ichigo Builder in Deployment Architecture 10-26-2011 0 2	0	2
IOError: [Errno 13] Permission denied Hi there! I was trying to access log files from a remote drive. After failing to index any content from the directory... by 843359 Explorer in Deployment Architecture 10-26-2011 0 4	0	4
Error deploying an app from Windows deploy server to nix forwarder Upgrading the Windows 2008 Indexer/Deploy Server from 4.1.x to 4.2.2 the deploy server can't deploy nix apps due to ... by Cris Explorer in Deployment Architecture 10-25-2011 0 3	0	3
Delete Indexed data I want to know when data are moved from Hot to Warm bucket? does it depend on the date it was indexed in Splunk? or d... by eantonio Path Finder in Deployment Architecture 10-24-2011 0 1	0	1
Not able to forward udp messages from Universal fowarder. (v4.2.3) I have installed a universal forwarder and configure it to listen on two ports tcp:55555 and udp:33333 and to forward... by asingla Communicator in Deployment Architecture 10-21-2011 1 9	1	9
How do I index W3C logs from my Web Server I'm deploying the UF to my Web Severs and I want to be able to pull W3C logs. What config settings in the UF do I nee... by eantonio Path Finder in Deployment Architecture 10-20-2011 0 3	0	3
Why can't I set maxHotBuckets > 10 ? We have an index that receives a lot of events resulting in buckets with 2 hour spans. I initially figured I would g... by the_wolverine Champion in Deployment Architecture 10-19-2011 2 6	2	6
enabling deployment monitor when I try to enable this app i get: Error occurred attempting to enable SplunkDeploymentMonitor: In handler 'locala... by mmattek Path Finder in Deployment Architecture 10-19-2011 0 1	0	1
Deployment Server Hostname or IP Where can I get the IP or hostname of Deployment Server? I need that to install the Universal Forwarder. Do I create ... by tleinenbach New Member in Deployment Architecture 10-13-2011 0 1	0	1
Increasing Splunks Search performance on Linux Hi. We have several big Splunk installations and im working on trying to increase the search performance on them. Unf... by dragmore Explorer in Deployment Architecture 10-11-2011 0 5	0	5
Is "phoneHomeIntervalInSecs" being ignored? Hi. I'm using a Deployment Server to push configurations to a Splunk Universal Forwarder that is running Windows. F... by mfeeny1 Path Finder in Deployment Architecture 10-10-2011 1 5	1	5
Configuring forwarder and receiver Hi There, I'm very new to splunk and trying to do a POC on my laptop. I installed windows version of splunk and inst... by Ferrari Explorer in Deployment Architecture 10-07-2011 1 4	1	4
Custom search command for distributed search if I write a custom search command, do I have to put the .py script on both the search head and the indexer? by davecroto Splunk Employee in Deployment Architecture 10-05-2011 2 2	2	2