Deployment Architecture

Community Activity

Why are indexers from Site1 not reporting to search head? Hi folks,Below are the Architecture Multisite indexer cluster 8 peers with 1 CM search head cluster. Site2 peers are... by Ninjakart Explorer in Deployment Architecture 12-20-2022 0 0	0	0
How to resolve: No new bundle will be applied. The master and peers already have this bundle? Hey! So I have a a self host splunk enterprise environment with a Cluster Master(deployment server is a separate inst... by devin07 Explorer in Deployment Architecture 12-20-2022 0 1	0	1
Is there a way of limiting the search load on an index cluster using configuration in the index cluster? Is there a way of limiting the search load on a index cluster using configuration in the index cluster? E.g. setting ... by pellegrini Path Finder in Deployment Architecture 12-19-2022 0 3	0	3
Why is $splunk/var/run/splunk/snapshots/ not being cleaned up? I added 4 new search heads to my SHC today. Everything appears to be golden, but the subject directory is filling wit... by twinspop Influencer in Deployment Architecture 12-19-2022 1 3	1	3
Heavy Forwarder to Splunk Cloud via Socks Proxy Hi, We have a project to implement splunk so that it talks out to splunk cloud, via a proxy server.To do this, i beli... by andrewparkes Loves-to-Learn in Deployment Architecture 12-14-2022 0 0	0	0
How to remove host field from search results? Hi guys, I needed to know that if is there any way to remove host field from the search results. Since we don't need ... by Pavan0604 Loves-to-Learn in Deployment Architecture 12-12-2022 0 2	0	2
How to optimize the current query? Hi hope you are doing good. im working on a use case which will trigger if any user is trying to connect from non bu... by debjit_k Path Finder in Deployment Architecture 12-10-2022 0 3	0	3
Autostart Splunk on boot : How do I configure Splunk to show up in the Service control applet? I am running Splunk on Fedora Core 12. How do I configure Splunk to show up in the Service control applet? or registe... by srich Explorer in Deployment Architecture 12-09-2022 3 2	3	2
How to define clients for a server class based on installed Windows feature? I have a use case where about 50% of my windows clients have IIS running on them. I'd like to have a server class ju... by paulcurry Path Finder in Deployment Architecture 12-08-2022 0 3	0	3
How to get all inputs per server and then compare with current indexed data? Hello,we would like to compare sources we ask to index and current state in Splunk (compare inputs.conf and current l... by splunkreal Influencer in Deployment Architecture 12-08-2022 0 3	0	3
Unable to remove member from search head cluster We need to migrate members in and out of a search head cluster. It is documented here ( http://docs.splunk.com/Docum... by Lucas_K Motivator in Deployment Architecture 12-06-2022 1 2	1	2
Is that safe to delete old catalogues in /opt/splunk/var/run/searchpeers? Hello All,we have just found some pretty old catalogues and delta files in /opt/splunk/var/run/searchpeers on our ind... by justynap_ldz Path Finder in Deployment Architecture 12-05-2022 0 0	0	0
How to fix error msg = search on most data has completed? HI, Please tell me how to solve the message below. ERROR MSG = Search on most recent data has completed. Expect slowe... by minpd0309 Explorer in Deployment Architecture 12-04-2022 0 1	0	1
Is it a good idea for a hybrid architecture ES SH on aws and Indexer on premise? Hi Folks, I have quick architectural question, do think is a good idea set an architecture with a ES search head on... by aasabatini Motivator in Deployment Architecture 12-02-2022 0 3	0	3
How to tune ulimits across the deployment? Hi,I have a distributed on Prem Splunk Enterprise Deployment at 8.1.x.Splunk is running under Systemd.I recently noti... by Glasses2 Communicator in Deployment Architecture 12-02-2022 0 5	0	5
Merging apps from deployment server? Need some help with deploying and merging an app. We have a deployment server that store apps in following folders:~/... by jotne Builder in Deployment Architecture 11-30-2022 0 2	0	2
What is the 'Restart Splunkd' option for ? 1) Which 'splunkd' is this referring to? The Universal Forwarder or Splunk Enterprise (the Deployment Server)?2) 'Aft... by BG Explorer in Deployment Architecture 11-30-2022 0 4	0	4
How do you add a new Search Head to Splunk Monitoring Console? Hi at all, I have a distributed environment with a Search Head Cluster, some indexers. Deployment Server and I can s... by gcusello SplunkTrust in Deployment Architecture 11-30-2022 0 7	0	7
How do I reference a Splunk Cloud index within inputs.conf on my deployment-client ? I've created a new index in Splunk Cloud and trying to ingest log files from one of our application servers. This app... by BG Explorer in Deployment Architecture 11-25-2022 0 8	0	8
Cannot access Splunk from remote computers? I have Splunk installed on a machine running Windows 10 that is compliant with all Windows 10 STIGs. I can access Sp... by rockb Explorer in Deployment Architecture 11-23-2022 0 7	0	7
What is the use of runScript.py? Hi all, We have noticed on our EDR some noise coming from the script C:\Program Files\Splunk\bin\runScript.py" which ... by rdzivk New Member in Deployment Architecture 11-23-2022 0 1	0	1
Indexes are not showing in Search head cluster? Hey Splukers Its a distributed environment. we created index in Cluster Master. We can access the indexes in SH clust... by splunkkrishdee Explorer in Deployment Architecture 11-22-2022 0 2	0	2
Is it possible to connect my ESET Server to SC4S to send syslog messages? Hi there, I would like to connect my ESET Server to SC4S to send syslog messages. I know that Eset is not listed on s... by Adpafer Loves-to-Learn Everything in Deployment Architecture 11-21-2022 0 1	0	1
Is there a Systemd file for splunk SOAR? Is there a Systemd file for splunk SOAR. The problem I'm facing is I cannnot stop and start Splunk SOAR using the sta... by alexythomas Observer in Deployment Architecture 11-21-2022 0 1	0	1
Why am I getting partial results on some indexers? Seeing ERROR message "may have returned partial results" from few indexers". Logs from those indexers are showing fo... by kyaparla Path Finder in Deployment Architecture 11-18-2022 0 1	0	1