Deployment Architecture

Community Activity

How to achieve distsearch.conf search head clustering? Hello. I can't change the file, or I might be doing something wrong. Tell I am editing distsearch.conf fileI delete t... by gitingua Communicator in Deployment Architecture 04-26-2023 0 6	0	6
Which port does Splunk use for Universal Forwarder monitoring? Hi, Which port does Splunk use for Universal Forwarder monitoring? Thanks! by Flower Loves-to-Learn Lots in Deployment Architecture 04-24-2023 0 3	0	3
How can I enable DDL and DML logs to be sent from DB2 database (on EC2 instance) to Splunk Enterprise (in AWS)? Both are in different accounts. Can universal forwarder help? by Amith_Splunk New Member in Deployment Architecture 04-24-2023 0 0	0	0
How to repoint the UF to the newly added forwarder? Hi Guys, I deployed a new heavy forwarder in our environment, however I'd want to repoint certain devices to the fres... by Rakzskull Path Finder in Deployment Architecture 04-21-2023 0 8	0	8
How can I resolve this error in Indexer? Facing below error Scanario: no of indexer=3 cluster master=1 Error:The cluster peer is unable to handle request at ... by engrimranzakir Explorer in Deployment Architecture 04-20-2023 0 3	0	3
Any possible cause for this Splunkforwarder Btree error? I am encountering this error in Splunk forwarder: ERROR BTree [15252 TcpOutEloop] - 9th child has invalid offset: ind... by Mohie Observer in Deployment Architecture 04-17-2023 0 0	0	0
Unable to log in to Deployment Server after upgrading Splunk Good day all,I am having some issues after upgrading from Splunk Enterprise version 9.0.0 to 9.0.3. When log in to th... by boydtc Loves-to-Learn Everything in Deployment Architecture 04-17-2023 0 6	0	6
What happens when a cluster master goes down? If the master goes down, what happens to incoming data? Does it continue to get replicated? How about if a bucket rol... by Steve_G_ Splunk Employee in Deployment Architecture 04-14-2023 1 4	1	4
Deployment Server License Calculation: Will my architecture requires Heavy Forwarder? Hi Team, In my environment we made the Deployment Server as License Master as well. Current Architecture 1 - Search H... by Atchyuth_P Path Finder in Deployment Architecture 04-11-2023 0 3	0	3
How to reduce hot and cold volume safely? Hi Splunkers I have 4 indexers in my cluster environment and 8 TB for hot volume, 4 TB for summaries, and 160 TB for ... by m_zandinia Path Finder in Deployment Architecture 04-09-2023 0 8	0	8
Decommissioning Old Site, Transitioning to Single Site I have a multi-site cluster, and am planning on decommissioning one to transform it into a single-site cluster.Lookin... by Sivrat Path Finder in Deployment Architecture 04-09-2023 0 1	0	1
What is the calculation used to determine Archived (Frozen) storage requirements to be 202.5GB? Hi Splunkers, In the "Architecting Splunk 8.0.1 Enterprise Deployments" coursework, we have been given a data sizing ... by muradgh Path Finder in Deployment Architecture 04-05-2023 0 2	0	2
[SHC] What config changes will cause a rolling restart of search heads? When pushing a bundle via deployer, what config changes will cause the deployer to issue a rolling restart of the sea... by jwoger_splunk Splunk Employee in Deployment Architecture 04-04-2023 4 2	4	2
Why do I not see data from an index after restart? Hello SPlunkers , I am not seeing data for a particular index after restart3/29/235:00:34.647 PM03-30-2023 00:00:34... by power12 Communicator in Deployment Architecture 04-04-2023 0 1	0	1
Enabling SAML authentication (sign&go) with Splunk? Hello , I have sign&go as SSo tool and I have integrated it with splunk. I configured the chain of certificates "/op... by ze271021 Loves-to-Learn Everything in Deployment Architecture 04-03-2023 0 0	0	0
Update The inputs.conf on an app Im a splunk admin and I got asked to update the inputs.conf file for the app pingfederate. Im a little unsure of how ... by Abass42 Communicator in Deployment Architecture 03-30-2023 0 3	0	3
UniversalForwarder 9.0.4 not able to connect to Enterprise splunk 8.0.4 indexer? 03-30-2023 01:56:34.810 -0400 INFO AutoLoadBalancedConnectionStrategy [15424 TcpOutEloop] - Removing quarantine from... by ball Explorer in Deployment Architecture 03-30-2023 0 7	0	7
How to migrate standalone Enterprise Security search head to new ES search head cluster? Hi, Today we have a standalone enterprise security (ES) search head which we would like to migrate to a new ES search... by erw550 Path Finder in Deployment Architecture 03-29-2023 0 1	0	1
Slave-apps folder not showing on indexers(Peer nodes)? Hi team, Recently I have upgraded splunk 8.1.4 to 9.0.2 on all my instances , upgrade success and all components and ... by ssuluguri Path Finder in Deployment Architecture 03-27-2023 0 2	0	2
Why didn't peer indexer cluster? I have a stand-alone SH with 3 peer(non-clustered) indexers. I tried adding a 4th non-cluster indexer as a peer. 2 da... by TryingSplunk Explorer in Deployment Architecture 03-25-2023 0 12	0	12
How to create new index in index cluster? Hello, I have an issue regarding the creation of a new index. I want to create a new index to receive logs form NPS s... by ze271021 Loves-to-Learn Everything in Deployment Architecture 03-24-2023 0 3	0	3
Installing universal forwarder, can the Splunk user be a system user? I'm working on a linux machine hardened according to Center of Internet Security (CIS) hardening benchmarks. This me... by dbilling New Member in Deployment Architecture 03-23-2023 0 1	0	1
Data durability - Search factor is not met? Hi,We have a splunk architecture of 2 search head,2 indexers,1 management server.These are all installed on RHEL7. Af... by Gh0st_rid3r Explorer in Deployment Architecture 03-21-2023 0 4	0	4
What proxy rules are needed to allow install for apps from Splunkbase? Hello, What proxy rules I need to allow to install apps from Splunkbasewhat URL\s I need to allow? https://*splunk.... by randqm Loves-to-Learn Everything in Deployment Architecture 03-21-2023 0 0	0	0
Cannot replicate remote storage enabled warm bucket 8.2.5 Enterprise _internal index has 5 buckets with this error:ClusterSlaveBucketHandler [xxxxxx TcpChannelThread] - ... by John_Littleton Explorer in Deployment Architecture 03-15-2023 0 2	0	2