Deployment Architecture

Community Activity

Error on enabling boot-start Debian GNU/Linux 6.0 (Squeeze) # splunk --version Splunk Universal Forwarder 4.2 (build 96430) # splunk enable boot-... by uptimebox Engager in Deployment Architecture 12-18-2011 3 1	3	1
Configure SNMP trap in UNIX I went through the documentation at "http://docs.splunk.com/Documentation/Splunk/4.2.2/Admin/SendSNMPtrapstoothersyst... by anirbanukil Explorer in Deployment Architecture 12-15-2011 0 2	0	2
How to backup the GUI I have been researching how to backup splunk, and a lot of the information I'm finding pertains to the indexes. Is t... by appmandan Path Finder in Deployment Architecture 12-14-2011 0 2	0	2
predict future results? Is there any application, process, or feature of splunk that will preduct future behavior based on past performance? ... by DTERM Contributor in Deployment Architecture 12-10-2011 0 1	0	1
Cannot access splunkweb after initial install I am new to Splunk and just installed splunk-4.2.4-110225-linux-2.6-x86_64.rpm on Red Hat Linux Enterprise 6. The in... by bnklein Engager in Deployment Architecture 12-09-2011 4 2	4	2
license master DR/ HA/ Redundancy - use DNS name Can the license master config point to a DNS name? I.e if there was an issue with Licese master server we do not wa... by r999 Path Finder in Deployment Architecture 12-09-2011 1 2	1	2
Seach head and search peer with multiple custom indexes Hai there, I have a indexer with index=a index=b, and a searchead connected to it ( default no changes yet) When ru... by Starlette Contributor in Deployment Architecture 12-07-2011 0 2	0	2
Fowarder host name - FQDN how can configure splunk Home -> All forwarders to the FQDN instead of just the host name? Thanks by yzidell Engager in Deployment Architecture 12-07-2011 1 2	1	2
Splunk on HP-UX, Too much CPU consumption Hello fellow splunkers! Anybody out there have experience with Splunk on HP-UX where it just consumes too much CPU r... by clyde772 Communicator in Deployment Architecture 12-02-2011 1 5	1	5
Cluster Grouping I want to group the cluster value based on the similar punct. I have used the following query. tag="tagname" sourcety... by rkanalyst Explorer in Deployment Architecture 12-01-2011 0 1	0	1
cant concatenate indexed data concatenating fields at index time doesn't seem to work. I have the following transform: [gztdnv] REGEX = <td>\s+(\S... by cwi Engager in Deployment Architecture 12-01-2011 0 6	0	6
what happens when NAS used for search head pooling goes down? Our search heads are on our indexers (i.e. they're the same thing). We're looking at doing search head pooling in th... by mfrost8 Builder in Deployment Architecture 11-29-2011 0 2	0	2
Is this Sparc system a good choice for my splunk indexer? If not, what is? My hardware vendor just called and offered me a great deal on a Sun SPARC Enterprise T5120 Server, he said it would b... by Mick Splunk Employee in Deployment Architecture 11-28-2011 10 3	10	3
Documentation on Scheduler State in Search Head Pooling Is there any documentation around on how scheduler state works when deploying multiple search heads in a search head ... by Damien_Dallimor Ultra Champion in Deployment Architecture 11-28-2011 0 3	0	3
_audit index remains disabled Im always getting this error related to the internal _audit index in Splunk: **received event for unconfigured/disab... by Dark_Ichigo Builder in Deployment Architecture 11-27-2011 0 3	0	3
Forcing a Deployment Server to Not Attempt to Resolve IP Address Hello, everyone. When it comes to Indexers, there is an option you can use in "inputs.conf" where you add the follow... by jchensor Communicator in Deployment Architecture 11-21-2011 0 1	0	1
UNIX last event /var/log/wtmp Hi all, My UNIX (Solaris) host installed Splunk universal forwarder in which some kind of monitor in inputs.conf is ... by rossikwan Path Finder in Deployment Architecture 11-20-2011 0 7	0	7
AIX HACMP and shared storage log monitor Hi, is anyone doing this sort of configuration? AIX HACMP cluster with shared storage, log file is on shared storage.... by gts1999 Engager in Deployment Architecture 11-16-2011 1 2	1	2
Forwarder still forwarding to removed indexer I have a strange one. I'm migrating hosts to a different indexer to redistribute my workload. Last week from the co... by richard_whiffen Explorer in Deployment Architecture 11-15-2011 0 4	0	4
deployment client machine type I have a deployment server that I use to configure systems by MaichineType. I have windows-intel, windows-64x, linux... by hartfoml Motivator in Deployment Architecture 11-11-2011 0 2	0	2
Deployment server: 2nd install of Splunk on an indexer? When planning my Splunk deployment I didn't allow for a separate deployment server. My 2 indexers are quite brawny (1... by twinspop Influencer in Deployment Architecture 11-08-2011 2 2	2	2
How to convert audit.log data to usernames instead of user id numbers? I'm using the standard auditd in Linux to capture "permission denied" messages. For some odd reason, auditd likes to... by splukUP Engager in Deployment Architecture 11-08-2011 1 2	1	2
Unable to connect to remote splunk server I'm trying to run the splunk CLI client using a remote server uri. The remote server is live and listening on port 80... by cloudharmony Explorer in Deployment Architecture 11-05-2011 0 3	0	3
Any side-effect if directly delete the warm bucket? Dear all Since each warm bucket has its time span from earliest to latest, so if i wanna directly delete the warm bu... by hjwang Contributor in Deployment Architecture 10-30-2011 0 2	0	2
Searchhead pooling and scheduled searches. I'm running some tests with searchhead pooling and scheduled searches. I'm running a saved search every minute and t... by nocostk Communicator in Deployment Architecture 10-28-2011 3 2	3	2