Deployment Architecture

Deployment Architecture
Community Activity
aatik5u
Hello everyone! I am working on test environment where I only have one Splunk instance. I edited on the journal.zst f...
by aatik5u Path Finder in Deployment Architecture 10-28-2022
0 2
0
2
vtalanki
Hi, We have close to 1000 indexers in our splunk cluster on AWS. Each indexer has 15TB SSD local storage. Our retenti...
by vtalanki Path Finder in Deployment Architecture 10-21-2022
0 3
0
3
ersky
Hello, I am trying to create a new clustered search head and was planning to create this using the docker images, I h...
by ersky Observer in Deployment Architecture 10-20-2022
0 0
0
0
gerryha
I guess my real question is how do I move Splunk from one company to another, including some but not all of the data ...
by gerryha Explorer in Deployment Architecture 10-19-2022
0 4
0
4
debjit_k
Hi, im working on new use case, but was stuck in few things.  I want to create a use case logic to monitors whenever ...
by debjit_k Path Finder in Deployment Architecture 10-19-2022
0 3
0
3
debjit_k
Hi  Hope you are doing good.. I want to build one query where I will get user with associate event code or IP for exa...
by debjit_k Path Finder in Deployment Architecture 10-19-2022
0 3
0
3
ayush1906
Hello,    I have setup a cluster behind aws NLB, about a month back, suddenly the UI is taking too long to load, i tr...
by ayush1906 Communicator in Deployment Architecture 10-19-2022
0 2
0
2
giselle_531
Does anyone know a command to monitoring the web loading response (time) of a Splunk page/server? Like when you navig...
by giselle_531 Observer in Deployment Architecture 10-18-2022
0 0
0
0
chimbudp
Splunk receives raw data. Splunk indexer will index the data to Series of Events. Both the raw data and also the inde...
by chimbudp Contributor in Deployment Architecture 10-18-2022
4 7
4
7
k31453
Hi, So I am trying to build SPL for how long does it take to restart splunk. BIt of context, We do sometimes do rolli...
by k31453 Explorer in Deployment Architecture 10-18-2022
0 2
0
2
splunkreal
Hello, how to remove and clean corrupt peer (indexer) from cluster? Should we stop it then after hardware maintenance...
by splunkreal Influencer in Deployment Architecture 10-18-2022
0 4
0
4
skeer007
So a few days ago I typo'd the index name in the inputs.conf file on serverA running the universal forwarder, and ina...
by skeer007 Explorer in Deployment Architecture 10-13-2022
0 10
0
10
Marlan
We have a 8.1.2 dployment with 2 clustered indexers and a search head cluster. We have two master nodes, one is opera...
by Marlan Explorer in Deployment Architecture 10-13-2022
0 6
0
6
POR160893
Hi, I am creating a React app for Splunk on a Putty terminal. I am following the following tutorial:https://splunkui....
by POR160893 Builder in Deployment Architecture 10-12-2022
0 2
0
2
kristian_kolb
Have run into a minor problem when cloning virtual machines with a forwarder installed. Unfortunately, the guid (glob...
by kristian_kolb Ultra Champion in Deployment Architecture 10-12-2022
4 8
4
8
Chiranjeev88
Hi, i have to scale down my search head cluster to a standalone one but there is no documentation anywhere, is it pos...
by Chiranjeev88 Explorer in Deployment Architecture 10-11-2022
0 6
0
6
shrutheen
I have 3 Search Heads and 3 Indexers with Replication Factor =1 and Search Factor=1. My requirement is to increase th...
by shrutheen Explorer in Deployment Architecture 10-11-2022
0 1
0
1
dablab
Am I able to set up a Splunk instance that would allow users outside of my network to enter my Splunk instance in a V...
by dablab Explorer in Deployment Architecture 10-11-2022
0 1
0
1
Sithima
How does Splunk performance affect, when the status of "buckets_created_last_60m" and "percent_small_buckets_created_...
by Sithima Explorer in Deployment Architecture 10-07-2022
0 1
0
1
risingflight143
On one of my RHEL 7.9 server, i am seeing splunk service is Active:active(exited). i am using 8.2.2.0. please guide m...
by risingflight143 Explorer in Deployment Architecture 10-05-2022
0 1
0
1
jpfrancetic
Hi Splunk community, I am currently having an issue with deploying apps to universal forwards.  On the deployment ser...
by jpfrancetic Path Finder in Deployment Architecture 10-04-2022
0 1
0
1
yiweishih
I destroyed some VMs in my production recently. But I can still them in the page: "IT Essentials Work" => "Infrastruc...
by yiweishih Explorer in Deployment Architecture 10-03-2022
0 2
0
2
debjit_k
Hi  Hope you are doing good.. I'm having a small query I want to check my license warning on my splunk with date I.e....
by debjit_k Path Finder in Deployment Architecture 10-02-2022
0 1
0
1
ejharts2015
We just upgraded to the VirusTotal Checker 1.3 version and now we get a "Socket Timeout. Please Check Your Internet C...
by ejharts2015 Communicator in Deployment Architecture 10-01-2022
1 5
1
5
Christians86
    Hi, I have had this problem twice now on two different computers.    I install debian/ubuntu Then I use the .deb ...
by Christians86 Explorer in Deployment Architecture 10-01-2022
0 7
0
7
Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...