Deployment Architecture

Community Activity

Deployment server firewall rules I am planning to use the deployment server functionality of splunk 4.2 . I am trying to in down all the firewall rul... by EricPartington Communicator in Deployment Architecture 04-13-2011 2 1	2	1
seeing meta tags with log entries Hello: I am very new to splunk - I have configured a lightforwarder to forward syslogs to splunk collector on a spec... by initconf New Member in Deployment Architecture 04-13-2011 0 2	0	2
4.2 search head - Asynchronous bundle replication error I am encountering the following error when distributing search between a 4.2 search head and a 4.1.5 indexer: Asynch... by rsimieng Splunk Employee in Deployment Architecture 04-13-2011 1 7	1	7
Unix App and searching Unix Logs So once you have the unix app installed, one of the things it does is monitors /var/log. However you can't seem to s... by nmcbride Engager in Deployment Architecture 04-11-2011 1 2	1	2
Deployment: input.conf is not executing on deployment client I’ve created a simple deployment app for windows systems to filter unwanted logs from windows event logs. There are 4... by mgivechi New Member in Deployment Architecture 04-11-2011 0 5	0	5
Question of forwarding We are running Splunk 4.1.7 version, We have a Splunk Indexer in non windows environment. We have all the other serve... by ppram New Member in Deployment Architecture 04-08-2011 0 1	0	1
my deployment server crash I have a VM linux indexer/deployment server. with > 500 forwarders and deployment clients The server keeps crashing,... by mataharry Communicator in Deployment Architecture 04-08-2011 1 1	1	1
Are double quotes acceptable to use for wrapping values in my conf files? For instance, if I try this in my distsearch.conf, it doesn't work: [searchhead:SearchHead01-root] mounted_bundles =... by jbsplunk Splunk Employee in Deployment Architecture 04-07-2011 5 1	5	1
Way to filter events from being displayed at the top of the seach UI? I have a Search Head that has direct customer access and I would like to prevent systems messages from appearing at ... by tgow Splunk Employee in Deployment Architecture 04-07-2011 0 2	0	2
NAT IP causes certain searches to crash CherryPy application server Very strange issue we seem to be having. We're running 4.0.9 (hopefully upgrading soon... has to pass validation firs... by TR_Splunker Engager in Deployment Architecture 04-03-2011 0 2	0	2
Given a bucket name of db_1274129994_1273525194_0 what is the span of the events within this bucket? I have the following bucket: $SPLUNK_HOME/var/lib/splunk/defaultdb/db/db_1274129994_1273525194_0 Is there someway to... by the_wolverine Champion in Deployment Architecture 04-01-2011 2 2	2	2
Seeing recurring error "Timeliner - Failed to rm dir" even though permissions are correct... We've been seeing the same error as originally mentioned in this older question: http://answers.splunk.com/questions... by tmeader Contributor in Deployment Architecture 03-31-2011 1 3	1	3
How to categorize all AIX servers via serverclass.conf machineTypes for deployment manager I'm on splunk-4.1.3-80534 I have deployment manager setup and it works for sunos and linux.. but how would I match f... by chicodeme Communicator in Deployment Architecture 03-30-2011 0 4	0	4
Permissions on CLI to execute splunk add monitor Hi, We deploy forwarders to provide data to Splunk indexers. Whom is permitted to run the command "splunk add monitor... by dchang New Member in Deployment Architecture 03-30-2011 0 1	0	1
Is there a way to restore hot buckets? Nope, didn't know about the proper procedure for backing up database and NOT being able to backup hot buckets (now I ... by Michael Contributor in Deployment Architecture 03-28-2011 3 3	3	3
How to configure a Splunk instance as a Deployment server? How to configure a Splunk instance as a Deployment server? by ricky_pin New Member in Deployment Architecture 03-28-2011 0 1	0	1
Can I switch my install method on Linux? If I start off using the tgz installer can I subsequently start using a package installer (rpm or deb)? Is it as sim... by matt Splunk Employee in Deployment Architecture 03-27-2011 1 2	1	2
Search head pooling error I'm trying to setup search head pooling. I've followed the directions listed here But when I startup splunkd I get ... by nocostk Communicator in Deployment Architecture 03-25-2011 1 1	1	1
Search Head Pooling - Shared Storage Not Available I am setting up search head pooling in a geographically diverse implementation. I have indexes and search heads in 3... by Edub Explorer in Deployment Architecture 03-23-2011 1 1	1	1
CentOS 5.5 experience of Splunk Hi, does anyone have experience with Splunk running on CentOS 5.5 compared to any version of redHat or ubuntu? Any is... by Excelsys New Member in Deployment Architecture 03-23-2011 0 4	0	4
Splunkd won't restart Hi all! This windows splunk ver splunk-4.1.2-79191-x86-release running on a windows server 2003 US does not start an... by MrSplunksta Path Finder in Deployment Architecture 03-23-2011 0 7	0	7
Splunk running on my linux server is only showing me events from my local subnet, what is going on? Splunk is running on my Linux box, and everything appears to be operating almost correctly. I have data coming in fro... by jbsplunk Splunk Employee in Deployment Architecture 03-21-2011 4 1	4	1
how to store logs in different indexes hi my question is how i can store my logs/data on different indexes. please explain the whole process in detail????? by rupesh212121 Explorer in Deployment Architecture 03-21-2011 0 1	0	1
Stripping down dedicated deployment server? We built a dedicated deployment server a while back when we started noticing (thanks to Splunk support) that running ... by mfrost8 Builder in Deployment Architecture 03-18-2011 1 1	1	1
Do distributed cloned indexes increase search performance? It looks like indexes on both nodes are updated with the same entries. Does distributed indexing load and index the s... by suhprano Path Finder in Deployment Architecture 03-18-2011 1 1	1	1