Deployment Architecture

Deployment Architecture
Community Activity
Simeon
I have an installation of Splunk that consists of multiple indexers being searched by a distributed search head. Cur...
by Simeon Splunk Employee Splunk Employee in Deployment Architecture 06-18-2010
1 3
1
3
Dan
Multiple indexes: I had mistakenly created indexes X and Y, and now I want to merge the two data sets. Multiple inde...
by Dan Splunk Employee Splunk Employee in Deployment Architecture 06-18-2010
1 1
1
1
pmelchiori
I have four servers in different network with the same Windows Name. I've created a Splunk collector and the logs are...
by pmelchiori Explorer in Deployment Architecture 06-09-2010
1 4
1
4
zliu
Sometimes when restart the Splunk Light Forwarder, user will experience a core dump. The forwarder still restarts and...
by zliu Splunk Employee Splunk Employee in Deployment Architecture 06-01-2010
1 3
1
3
Brian
Hi, We’re creating some backup procedures and had some questions about how Splunk deals with Hot index files. I rea...
by Brian Engager in Deployment Architecture 05-31-2010
2 7
2
7
Genti
After making changes in my deployment apps, i do not see the change being replicated in my deployment clients. Do i h...
by Genti Splunk Employee Splunk Employee in Deployment Architecture 05-29-2010
1 1
1
1
dave_duvall
Anyone having good luck using machineType to filter clients in the deployment manager? Here is a snippet of my serve...
by dave_duvall Explorer in Deployment Architecture 05-28-2010
1 3
1
3
balbano
Hi, I realize that splunk and splunk light forwarder are apart of the same package RPM since light forwarder is jus...
by balbano Contributor in Deployment Architecture 05-27-2010
1 7
1
7
JHill
Trying to configure a deployment server to support multiple organizations. I have created a directory structure withi...
by JHill Explorer in Deployment Architecture 05-20-2010
0 1
0
1
Ledio_Ago
Let's say I have a distributed Splunk environment, n indexers, one search head and a forwarder load balancing input d...
by Ledio_Ago Splunk Employee Splunk Employee in Deployment Architecture 05-20-2010
3 2
3
2
balbano
Hi all, One of the servers we installed Splunk LF on is having high CPU and Memory Utilization as a result of Splun...
by balbano Contributor in Deployment Architecture 05-19-2010
1 6
1
6
mkinner
Using Splunk server & clients running 4.1.2. When I installed Splunk on our many clients I enabled the SplunkLightFo...
by mkinner Explorer in Deployment Architecture 05-18-2010
1 4
1
4
ostmovid
I use several SplunkLightFirwarders on Suslog-ng servers to have a "buffer" to relatively large amounts of syslog tha...
by ostmovid New Member in Deployment Architecture 05-18-2010
0 9
0
9
balbano
Hey guys, I managed to setup deployment server / client test model with our 2 central indexers and a test sample of...
by balbano Contributor in Deployment Architecture 05-17-2010
0 1
0
1
Chris_R_
What are the id_XX buckets that show up under "index activity", They also show up in the bucket directories. What do ...
by Chris_R_ Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
0 4
0
4
maverick
If I have a Splunk indexer running on a 32-bit OS and another Splunk indexer running on a 64-bit OS, can I setup Splu...
by maverick Splunk Employee Splunk Employee in Deployment Architecture 05-13-2010
1 2
1
2
jambajuice
If I have a UDP input defined in /etc/system/local/inputs.conf and I create event filters using a transforms.conf and...
by jambajuice Communicator in Deployment Architecture 05-12-2010
1 1
1
1
balbano
Hey Guys, Just noticed that logging on one of my light forwarders is taking up a lot of space: myhost[05:15 PM]roo...
by balbano Contributor in Deployment Architecture 05-11-2010
1 2
1
2
Dan
I'm familiar with some of the system-wide limits and per-user quotas that prevent a Splunk instance from getting over...
by Dan Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
3 1
3
1
hulahoop
For indexer requirements, the following is listed as the recommendation configuration in the Planning Your Splunk Dep...
by hulahoop Splunk Employee Splunk Employee in Deployment Architecture 05-10-2010
1 3
1
3
tepperso
I stupidly enabled Lightweight forwarding from the web interface and now I can't get the web interference to load. H...
by tepperso Engager in Deployment Architecture 05-07-2010
0 2
0
2
Lowell
Are there any reason to setup both [monitor://] and a [fschange:] inputs for a single path? Are there any problems w...
by Lowell Super Champion in Deployment Architecture 05-05-2010
1 3
1
3
mctester
I was moving some buckets around to make some space on my main storage volume. I know the db_* directories are compl...
by mctester Communicator in Deployment Architecture 05-05-2010
3 5
3
5
mctester
The splunk cold storage file system is 100% full. I'm relatively new to splunk & not sure the proper way to purge.
by mctester Communicator in Deployment Architecture 05-04-2010
0 3
0
3
mctester
I had the Unix app running for a while on this instance and that was indexing a lot of data so I disabled the 'os' in...
by mctester Communicator in Deployment Architecture 04-30-2010
1 1
1
1
Get Updates on the Splunk Community!

Make your Splunk investment work harder with Optimization Advisor

Value Insights brings usage evidence and practical recommendations together to help customers make more ...

How Splunk AI Assistant Is Transforming Investigations: Insights from .conf26

At .conf26 in Denver, I spent much of my time in conversation with Splunk customers about Splunk AI Assistant. ...

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...