Deployment Architecture

Deployment Architecture
Community Activity
JHill
Trying to configure a deployment server to support multiple organizations. I have created a directory structure withi...
by JHill Explorer in Deployment Architecture 05-20-2010
0 1
0
1
Ledio_Ago
Let's say I have a distributed Splunk environment, n indexers, one search head and a forwarder load balancing input d...
by Ledio_Ago Splunk Employee Splunk Employee in Deployment Architecture 05-20-2010
3 2
3
2
balbano
Hi all, One of the servers we installed Splunk LF on is having high CPU and Memory Utilization as a result of Splun...
by balbano Contributor in Deployment Architecture 05-19-2010
1 6
1
6
mkinner
Using Splunk server & clients running 4.1.2. When I installed Splunk on our many clients I enabled the SplunkLightFo...
by mkinner Explorer in Deployment Architecture 05-18-2010
1 4
1
4
ostmovid
I use several SplunkLightFirwarders on Suslog-ng servers to have a "buffer" to relatively large amounts of syslog tha...
by ostmovid New Member in Deployment Architecture 05-18-2010
0 9
0
9
balbano
Hey guys, I managed to setup deployment server / client test model with our 2 central indexers and a test sample of...
by balbano Contributor in Deployment Architecture 05-17-2010
0 1
0
1
Chris_R_
What are the id_XX buckets that show up under "index activity", They also show up in the bucket directories. What do ...
by Chris_R_ Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
0 4
0
4
maverick
If I have a Splunk indexer running on a 32-bit OS and another Splunk indexer running on a 64-bit OS, can I setup Splu...
by maverick Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
1 2
1
2
jambajuice
If I have a UDP input defined in /etc/system/local/inputs.conf and I create event filters using a transforms.conf and...
by jambajuice Communicator in Deployment Architecture 05-12-2010
1 1
1
1
balbano
Hey Guys, Just noticed that logging on one of my light forwarders is taking up a lot of space: myhost[05:15 PM]roo...
by balbano Contributor in Deployment Architecture 05-11-2010
1 2
1
2
Dan
I'm familiar with some of the system-wide limits and per-user quotas that prevent a Splunk instance from getting over...
by Dan Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
3 1
3
1
hulahoop
For indexer requirements, the following is listed as the recommendation configuration in the Planning Your Splunk Dep...
by hulahoop Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
1 3
1
3
tepperso
I stupidly enabled Lightweight forwarding from the web interface and now I can't get the web interference to load. H...
by tepperso Engager in Deployment Architecture 05-07-2010
0 2
0
2
Lowell
Are there any reason to setup both [monitor://] and a [fschange:] inputs for a single path? Are there any problems w...
by Lowell Super Champion in Deployment Architecture 05-05-2010
1 3
1
3
mctester
I was moving some buckets around to make some space on my main storage volume. I know the db_* directories are compl...
by mctester Communicator in Deployment Architecture 05-05-2010
3 5
3
5
mctester
The splunk cold storage file system is 100% full. I'm relatively new to splunk & not sure the proper way to purge.
by mctester Communicator in Deployment Architecture 05-04-2010
0 3
0
3
mctester
I had the Unix app running for a while on this instance and that was indexing a lot of data so I disabled the 'os' in...
by mctester Communicator in Deployment Architecture 04-30-2010
1 1
1
1
dave_duvall
I have an "app" that I deploy with my 4.x deployment server. It sends savedsearches.conf, tags.conf, props.conf, eve...
by dave_duvall Explorer in Deployment Architecture 04-30-2010
0 2
0
2
Lowell
Anyone know the best way to monitor deployment activity of a splunk server? I've found DeploymentMetrics coming from...
by Lowell Super Champion in Deployment Architecture 04-30-2010
0 1
0
1
dave_duvall
I'm in the process of upgrading my deployment server to 4.x. I don't push configuration change that often and I hav...
by dave_duvall Explorer in Deployment Architecture 04-29-2010
0 2
0
2
maverick
I need to push out a new admin password to all of my remote Splunk instances/forwarders. Can I use Splunk Deployment...
by maverick Splunk Employee Splunk Employee in Deployment Architecture 04-26-2010
1 6
1
6
kbecker
Is there a CLI command that will set serverClasses in the deployment.conf file. Using Splunk forwarder version 3.4.1...
by kbecker Communicator in Deployment Architecture 04-26-2010
1 1
1
1
rsimmons
Just completed an upgrade and we are getting the error message - "There is no query runner registered" "Internal Serv...
by rsimmons Splunk Employee Splunk Employee in Deployment Architecture 04-17-2010
2 4
2
4
mzorzi
The disk space use on our search head is going up significantly. I would seem that *.bundle files in $SPLUNK_HOME/var...
by mzorzi Splunk Employee Splunk Employee in Deployment Architecture 04-16-2010
3 4
3
4
lguinn2
Do I need to configure distributed search on all the search peers?
by Legend in Deployment Architecture 04-14-2010
1 2
1
2
Get Updates on the Splunk Community!

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Data Drivers: How We're Streaming Real-Time F1 Telemetry Directly into Splunk ...

Data Drivers: Every Lap Tells a Story The Spectacle Two F1 racing sims go head-to-head on the .conf26 show ...