Deployment Architecture

Community Activity

Moving Indexers to a New Site with RF Adjustments Hi everyone,I have 3 indexers (in a cluster) located on Site A. The current replication factor (RF) is set to 3.I nee... by m_zandinia Path Finder in Deployment Architecture 04-26-2025 0 2	0	2
Step by Step to upgrade Splunk? Hi, we have Dev and Prod linux servers which contains Splunk agents. The infraestructure on Prod (V 8.2.2.1) contain... by mc_i02035 Observer in Deployment Architecture 04-25-2025 0 5	0	5
Does Splunk support both SSO and token authentication at the same time? Hello to the community,I try to query Splunk from an external SDK for which I am asking from our admins for a token... by LukasO New Member in Deployment Architecture 04-22-2025 0 3	0	3
Doubt in indexer clustering HiI have a 2 site architectureSite 1 - 2 indexers, 2 ES SHSite 2 - 2 indexers, 1ES SHAll of them are in clusters.I wi... by rahulhari88 Explorer in Deployment Architecture 04-22-2025 0 6	0	6
System not hashing sslPassword server.conf Hello All I am creating an app that will have all the SSL certs and pem files in it. As part of the app I have the ... by edwardrose Contributor in Deployment Architecture 04-17-2025 0 4	0	4
Mutlisite SHC Hi I have a following architecture and i am trying to setup my Search head cluster .i have multiple questions , if i ... by rahulhari88 Explorer in Deployment Architecture 04-16-2025 0 14	0	14
Recommended Deployment Server Size Hello Guys,I have an existing deployment server and I'm reviewing the average network bandwidth of the server. That c... by whitefang1726 Path Finder in Deployment Architecture 04-10-2025 0 6	0	6
CM redundancy and cluster/manager/ha_active_status response Hello,we're implementing a distributed clustered infrastructure with CM redundancy, between the indexers/search heads... by llopreiato Explorer in Deployment Architecture 04-07-2025 0 6	0	6
Why is the KV Store status is showing as "starting" in Search Head Cluster? We created a KV Store in a search head in clustered architecture, by adding the files collections.conf and transforma... by TGanga Explorer in Deployment Architecture 04-06-2025 2 12	2	12
Newbie question: How to/Should I set up a deployment server in the docker compose trial Hi, we just started testing/experimenting with Splunk.Followed a Splunk4Rookies workshop but that focussed on the SPL... by ccecvb Engager in Deployment Architecture 04-06-2025 0 4	0	4
query to check fixup , SF, RF and data is searchable in splunk Is there is any query to check like if there is any fixup pending and also it shows SF , RF and data is searchable i... by Praz_123 Communicator in Deployment Architecture 04-03-2025 0 3	0	3
Splunkforwarder 9:.3 failing in docker desktop We are trying to run the splunk forwarder local to fix few vulnerabilities and getting the following error message an... by bhupalbobbadi Path Finder in Deployment Architecture 04-03-2025 0 1	0	1
Can't see the 'Install app from file' option (on search head cluster) After downloading an app from splunkbase, I got the following page - On the server, after clicking Mange Apps, I see... by ddrillic Ultra Champion in Deployment Architecture 04-02-2025 0 8	0	8
Can I integrate my ServiceNow instance with my Splunk dev environment? I have ServiceNow developer instance. Can I integrate with my Splunk dev environment. The Splunk Add on I am try in... by abi2023 Path Finder in Deployment Architecture 03-31-2025 0 8	0	8
Deployment app on multiple serverclass I wanted to add same base configuration for workstations and have serverclasses divided by organizations but base app... by nieminej Loves-to-Learn Lots in Deployment Architecture 03-27-2025 0 5	0	5
Deployment Server Uninstalling App from UF We have clustered Deployment Servers (with NFS shared drive) because we have total of clients tens of thousands at th... by nieminej Loves-to-Learn Lots in Deployment Architecture 03-26-2025 0 3	0	3
Collect SunOS-SPARC Logs Hello Splunkers!I am looking for a way to collect the SunOS-SPARC OS logs. After some research, I have tried to updat... by dania_abujuma Engager in Deployment Architecture 03-26-2025 0 2	0	2
Splunk icons for deployment document Where can I find the icons that I can use for a splunk architecture diagram? by ayomotukoya Explorer in Deployment Architecture 03-24-2025 0 3	0	3
How to handle homePath, coldPath and thawedPath on a single disc (mount) best praxis Without a tiered storage model it seems like there would be little argument for using cold/frozen storage. Except pot... by fatsug Builder in Deployment Architecture 03-24-2025 0 7	0	7
Why are not all indexes searchable when i have 1 broken indexer out of 2? I have 2 indexers in a cluster. One is down and one is up. All buckets are there on the indexer that is up but still ... by Gryphus Observer in Deployment Architecture 03-20-2025 0 6	0	6
Presenting Splunk Large-Scale Design with Mermaid / Draw.io or similar products hi Folks,I’m preparing to present a large-scale Splunk design to stakeholders and want to make it interactive. To ach... by koshyk Super Champion in Deployment Architecture 03-20-2025 0 4	0	4
Re-add search head. I tried to run ./splunk remove shcluster-member -mgmt_uri https://<CAPTAIN_IP>:8089 on the non-captain search head, w... by siemsplunk Explorer in Deployment Architecture 03-15-2025 0 6	0	6
Splunk 9.3 - WebUI module won't restart or start. I've had a working Splunk instance for a month, but post patch it refuses to start the webUI.Where I would either sta... by andy_itperson New Member in Deployment Architecture 03-14-2025 0 2	0	2
Timestamp ahead of _time We have a discrepancy of 30 to 40 seconds between the event timestamp and _time. I have tries changing the config on ... by alec_stan Explorer in Deployment Architecture 03-13-2025 0 5	0	5
Upgraded Heavy fowarder wihout data loss I'm planning to upgrade upgrade splunk environment now.3 shcluster - 3 index cluster - 2 heavy forwarder - 1 master. ... by blanky Explorer in Deployment Architecture 03-13-2025 0 5	0	5