Deployment Architecture

Community Activity

Register new Universal Forwarder with existing Deployment Server I have a new UF installation and wish to register it with an existing Deployment Server.When I run the command:$SPLUN... by vince88917 Explorer in Deployment Architecture 05-20-2022 0 1	0	1
How to Forward different subsets to different indexes? Hello Splunk Community, I am pretty new to Splunk and I have a use case where different subsets of logs are to be for... by rvk_sp_user Observer in Deployment Architecture 05-19-2022 0 5	0	5
How to migrate and update clustered environment? Hello, we have a cluster environment: - Search Head Cluster (3 nodes) - Indexers Cluster (4 sites) 10 nodes each actu... by giulioBalza Path Finder in Deployment Architecture 05-18-2022 0 6	0	6
Can we send Splunk report to Unix server? Hi Team, I'm generating a report weekly and sending it across as an email.However, the team wants this file to be pus... by vaishnab Loves-to-Learn in Deployment Architecture 05-18-2022 0 3	0	3
Indexer Cluster Replication Question Hello! I am looking for your help. I have 2 indexer nodes in a splunk indexer cluster with rf=2 and sf=2 and we want ... by aaronhernandez Explorer in Deployment Architecture 05-17-2022 0 2	0	2
Stdev against Null Time Bucket- How to create a rule alert on internal IP scanning? I've read quite a few forum posts about this but honestly didn't find a great solution for my use case (note that is ... by ericl42 Path Finder in Deployment Architecture 05-16-2022 0 6	0	6
Why the error "Failed to trigger replication" until it's uploaded? Getting numerous such errors on the Indexer Clustering: Service Activity page Failed to trigger replication (err='C... by dm1 Builder in Deployment Architecture 05-15-2022 1 3	1	3
Need Information on Licensing Requirements for Splunk Clustering on Indexers Hello Team,We are willing to understand the approach and the licensing requirements in order to install Splunk ES on ... by metmox1 Explorer in Deployment Architecture 05-13-2022 0 6	0	6
How to connect Search Head Cluster members to Indexers Cluster Master? After check some different questions about this I cannot find a solution. I'm trying to point my search head cluster ... by siemteam Explorer in Deployment Architecture 05-12-2022 2 11	2	11
DISABLED-rb in colddb, date quite fresh, still free space volume, when it happened with disabled_rb and disabled_db Anyone has ideas about this problem, I am not sure in which situation it will create disabled_rb in /colddb. Any docu... by mxyy31ruth Loves-to-Learn Lots in Deployment Architecture 05-10-2022 0 2	0	2
Why is the email icon not shown properly on Edit Alert screen when alert_actions.conf is deployed from the deployer? I created an App, and deployed it with alert_actions.conf to Search Heads. When I tried to set up an alert on a Searc... by hnoboru_splunk Splunk Employee in Deployment Architecture 05-08-2022 1 3	1	3
How can I control the client's Host Name that appears in Forwarder Management? Question: How can I control the client's "Host Name" that appears in Forwarder Management? Configuration: Splunk Ser... by fsalamo Explorer in Deployment Architecture 05-06-2022 4 13	4	13
Would it be possible for UFs to forward/send logs/events to other HFs/UFs? Hello, Would it be possible for UFs to forward/send logs/events to other HFs/UFs? Thank you! by SplunkDash Motivator in Deployment Architecture 05-06-2022 0 5	0	5
How to get the list of UF & HF in Splunk Cloud? How to get UF & HF list in Splunk Cloud by alexspunkshell Contributor in Deployment Architecture 05-04-2022 0 4	0	4
Data Feed Status in splunk: How I would know when the last time data came in under any index/sourcetype? Hello, How I would know when the last time data came in under any index/sourcetype? I have one query (see below) is... by SplunkDash Motivator in Deployment Architecture 05-04-2022 0 2	0	2
Configured inputs to monitor a file path but no events visible in Splunk Hi All, I have configured inputs to monitor a file path but no events visible in Splunk. Checked internal index and... by blbr123 Path Finder in Deployment Architecture 05-02-2022 0 3	0	3
Splunk Query to get all configured DB Connections and their associated index/sourcetypes inSPLUNK Hello,Are there any queries I can run from SPLUNK search head to find:1. all configured DB Connections and their asso... by SplunkDash Motivator in Deployment Architecture 04-29-2022 0 1	0	1
Why are the mask changes failing? HelloWe recently migrated our CM to a new clean host. After migration almost everything is good but I have a few erro... by tkw03 Communicator in Deployment Architecture 04-27-2022 0 1	0	1
Why are we experiencing this Splunk Permission Error Hello, Noticed my Indexer was down and I could not sign in. Went to restart splunk as sudo then root user and got ... by jbender72 Path Finder in Deployment Architecture 04-27-2022 0 12	0	12
How do I configure deployment server where I have a main or master server that has apps it pushes to its clients? How do I configure deployment server where I have a main or master server that has apps it pushes to its clients and ... by tam82 Explorer in Deployment Architecture 04-26-2022 0 1	0	1
Splunk KV Store setup in a Search head Cluster Hi, I having an issue with setting up my search head cluster environment. I have a stand alone deployment server inst... by ephremzw Loves-to-Learn Everything in Deployment Architecture 04-22-2022 0 5	0	5
How multisite SH clusters work I have a multisite cluster with 3 sites . Which is having 6 indexers as peer nodes clustered across the 3-sites (2 in... by sushree1234 Explorer in Deployment Architecture 04-20-2022 0 3	0	3
What will be the Impact of scaling up a multisite indexer cluster? Hi ,I have a multisite indexer cluster (3 sites , 2 indexers each, total 6 indexers) . we have kept - site_replicatio... by sushree1234 Explorer in Deployment Architecture 04-20-2022 0 2	0	2
Extract fields on the Heavy Forwarder hello, Please I need to know how can I extract field in the heavy forwarder?I try by adding the extract stanza in th... by aalaa Path Finder in Deployment Architecture 04-18-2022 0 7	0	7
Indexers mixed with sas-2 and sas-3 Good day,I am managing an infrastructure that currently has both sas-2 and sas-3 hard drives mixed in with the OS and... by matthewssa Path Finder in Deployment Architecture 04-18-2022 0 3	0	3