Deployment Architecture

Deployment Architecture
Community Activity
Ledio_Ago
Let's say I have a distributed Splunk environment, n indexers, one search head and a forwarder load balancing input d...
by Ledio_Ago Splunk Employee Splunk Employee in Deployment Architecture 05-20-2010
3 2
3
2
balbano
Hi all, One of the servers we installed Splunk LF on is having high CPU and Memory Utilization as a result of Splun...
by balbano Contributor in Deployment Architecture 05-19-2010
1 6
1
6
mkinner
Using Splunk server & clients running 4.1.2. When I installed Splunk on our many clients I enabled the SplunkLightFo...
by mkinner Explorer in Deployment Architecture 05-18-2010
1 4
1
4
ostmovid
I use several SplunkLightFirwarders on Suslog-ng servers to have a "buffer" to relatively large amounts of syslog tha...
by ostmovid New Member in Deployment Architecture 05-18-2010
0 9
0
9
balbano
Hey guys, I managed to setup deployment server / client test model with our 2 central indexers and a test sample of...
by balbano Contributor in Deployment Architecture 05-17-2010
0 1
0
1
Chris_R_
What are the id_XX buckets that show up under "index activity", They also show up in the bucket directories. What do ...
by Chris_R_ Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
0 4
0
4
maverick
If I have a Splunk indexer running on a 32-bit OS and another Splunk indexer running on a 64-bit OS, can I setup Splu...
by maverick Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
1 2
1
2
jambajuice
If I have a UDP input defined in /etc/system/local/inputs.conf and I create event filters using a transforms.conf and...
by jambajuice Communicator in Deployment Architecture 05-12-2010
1 1
1
1
balbano
Hey Guys, Just noticed that logging on one of my light forwarders is taking up a lot of space: myhost[05:15 PM]roo...
by balbano Contributor in Deployment Architecture 05-11-2010
1 2
1
2
Dan
I'm familiar with some of the system-wide limits and per-user quotas that prevent a Splunk instance from getting over...
by Dan Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
3 1
3
1
hulahoop
For indexer requirements, the following is listed as the recommendation configuration in the Planning Your Splunk Dep...
by hulahoop Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
1 3
1
3
tepperso
I stupidly enabled Lightweight forwarding from the web interface and now I can't get the web interference to load. H...
by tepperso Engager in Deployment Architecture 05-07-2010
0 2
0
2
Lowell
Are there any reason to setup both [monitor://] and a [fschange:] inputs for a single path? Are there any problems w...
by Lowell Super Champion in Deployment Architecture 05-05-2010
1 3
1
3
mctester
I was moving some buckets around to make some space on my main storage volume. I know the db_* directories are compl...
by mctester Communicator in Deployment Architecture 05-05-2010
3 5
3
5
mctester
The splunk cold storage file system is 100% full. I'm relatively new to splunk & not sure the proper way to purge.
by mctester Communicator in Deployment Architecture 05-04-2010
0 3
0
3
mctester
I had the Unix app running for a while on this instance and that was indexing a lot of data so I disabled the 'os' in...
by mctester Communicator in Deployment Architecture 04-30-2010
1 1
1
1
dave_duvall
I have an "app" that I deploy with my 4.x deployment server. It sends savedsearches.conf, tags.conf, props.conf, eve...
by dave_duvall Explorer in Deployment Architecture 04-30-2010
0 2
0
2
Lowell
Anyone know the best way to monitor deployment activity of a splunk server? I've found DeploymentMetrics coming from...
by Lowell Super Champion in Deployment Architecture 04-30-2010
0 1
0
1
dave_duvall
I'm in the process of upgrading my deployment server to 4.x. I don't push configuration change that often and I hav...
by dave_duvall Explorer in Deployment Architecture 04-29-2010
0 2
0
2
maverick
I need to push out a new admin password to all of my remote Splunk instances/forwarders. Can I use Splunk Deployment...
by maverick Splunk Employee Splunk Employee in Deployment Architecture 04-26-2010
1 6
1
6
kbecker
Is there a CLI command that will set serverClasses in the deployment.conf file. Using Splunk forwarder version 3.4.1...
by kbecker Communicator in Deployment Architecture 04-26-2010
1 1
1
1
rsimmons
Just completed an upgrade and we are getting the error message - "There is no query runner registered" "Internal Serv...
by rsimmons Splunk Employee Splunk Employee in Deployment Architecture 04-17-2010
2 4
2
4
mzorzi
The disk space use on our search head is going up significantly. I would seem that *.bundle files in $SPLUNK_HOME/var...
by mzorzi Splunk Employee Splunk Employee in Deployment Architecture 04-16-2010
3 4
3
4
lguinn2
Do I need to configure distributed search on all the search peers?
by Legend in Deployment Architecture 04-14-2010
1 2
1
2
Jeremiah
How should I allocate space for indexes among indexing nodes? For example, lets say I have 2 groups of servers that ...
by Jeremiah Motivator in Deployment Architecture 04-14-2010
1 1
1
1
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...
Top Solution Authors