Deployment Architecture

Community Activity

Why is /opt/splunk/var/run/splunk/cluster/search-buckets filling up my disk? Splunk 6.6.3, clustered env. One of our indexers reporting high disk usage. Traced it down to /opt/splunk/var/run/spl... by richarddicaire Path Finder in Deployment Architecture 03-30-2022 4 13	4	13
Does splunk provide support for Deploying Splunk to Oracle Cloud Platform We are currently have Splunk Enterprise deployed on-premise and are considering the possibility of implementing our d... by adnankhan5133 Communicator in Deployment Architecture 03-30-2022 0 5	0	5
Decommission A Site: How to change single site cluster to a two indexer configuration? I am currently needing to change our single site cluster to a two indexer configuration that is peered for ease of ma... by molinarf Communicator in Deployment Architecture 03-29-2022 0 2	0	2
Can someone explain to me the below Syslog architecture? Hi All, Can someone please explain me the below architecture for Syslog. by blbr123 Path Finder in Deployment Architecture 03-29-2022 0 7	0	7
Why the error when upgrade Splunk from 7.3.x to 8.1.5 on DMC Search Activity? Newly upgraded Splunk to 8.1.5 from 7.3.x and seeing the below error message on DMC Search Activity:Instance Multip... by dm1 Builder in Deployment Architecture 03-29-2022 0 1	0	1
How to cleanup etc/users folder on search head cluster I've got a lot of LDAP users who no longer exist (500+ folders in /etc/users). What's the proper way to clean this? I... by JustinSC Explorer in Deployment Architecture 03-25-2022 0 0	0	0
How can i check which all logs are being ingested in my clients splunk architecture? Hi i am new to splunk and TH I want to understand how can i check which all logs are being ingested in my clients... by SonakshiRaiTH New Member in Deployment Architecture 03-25-2022 0 1	0	1
Why do forwarders not show up in forwarder management? i installed a new splunk enterprise server and configured it as deploy server as documented here:https://docs.splunk.... by pbnl Path Finder in Deployment Architecture 03-24-2022 0 3	0	3
What are some best practices for deploying new Splunk cluster step-by-step? Hello guys, I would like to have best practices regarding deploying new Splunk cluster V8, could you say if correct a... by splunkreal Influencer in Deployment Architecture 03-24-2022 0 5	0	5
After upgrading from 7.3.0 to 8.0.0, Why does Splunk Web server turns out the ERROR message? I upgraded splunk enterprise instance from 7.3.0 to 8.0.0. All preliminary checks passed when splunk restarting.But w... by yeaobin New Member in Deployment Architecture 03-23-2022 0 4	0	4
What is Index Retention Policy for maximum storage usage? hi all, I am considering updating our index retention policy. However, I am not sure how to choose the maximum possib... by daisy Explorer in Deployment Architecture 03-23-2022 0 0	0	0
Can I add a Linux indexer as a search peer to a Windows search head? Hi, I have customers running Splunk on Windows on Nutanix. I'd like to take advantage of Smart Store, which requires ... by jeremyhagand61 Communicator in Deployment Architecture 03-23-2022 0 1	0	1
How to change the certain fonts color in labels of dashboard? I would like to ask if it's possible to change the certain fonts color in the label For exampleaaaaa / bbbbb I would ... by akoy New Member in Deployment Architecture 03-22-2022 0 6	0	6
Why did our Splunk DB connect 380 fail to start Task server on Linux machine? Hello Splunkers, I need urgent help on how to fix the below issue I need to configure splunk DB connect to be abl... by Muwafi Path Finder in Deployment Architecture 03-22-2022 0 7	0	7
Indexes.conf Stanza Storage for Indexer Cluster Settings Calculation Hello all. Thanks in advance for your assistance. I have a 6 node index cluster with a search factor of 6 and replica... by keithevanscdcr Explorer in Deployment Architecture 03-17-2022 0 0	0	0
How to update TA via Deployment Server? Hi all, from the available documentation, I am not getting how to practically update TA via Deplyoment server (i.e. d... by daisy Explorer in Deployment Architecture 03-17-2022 0 5	0	5
Can splunk Search Head and Indexer span across multiple AWS accounts? In our enterprise, there is already another team which has setup Splunk Search Heads and Indexers in their own AWS ac... by ramos Engager in Deployment Architecture 03-17-2022 0 6	0	6
Db connect output cron job not run on schedule after day light saving I am running db connect version 3.4.2 on Splunk 8.2.4. I have many splunk db connect output cron jobs scheduled at 6 ... by splunkhu123 Loves-to-Learn in Deployment Architecture 03-16-2022 0 0	0	0
How do you stop data replication midway and control the timing during Index Clustering? hi everyone, i have some doubts in indexer clustering how to stop data replication ? please provide splunk documenta... by human96 Communicator in Deployment Architecture 03-16-2022 0 1	0	1
Can microsoft defender add on use certificates? Hi Experts, would like to check if anyone tried using certificates for the Microsoft defender add-on. how / where do ... by siuolkl Explorer in Deployment Architecture 03-16-2022 0 3	0	3
How to fix the Splunk LDAP AD SYN issue ? Hi All, One of our Cyber security person facing a strange issue while trying to access the data from the Splunk searc... by Hemnaath Motivator in Deployment Architecture 03-16-2022 0 0	0	0
Is there a limit to the number of sessions that can be logged in at the same time with one account? Hi Splunker ! I want many guests to log in with a common guest account to view Splunk Enterprise (Dashboard Studio).... by kizukuri Explorer in Deployment Architecture 03-15-2022 0 7	0	7
Why is linux collector server not reporting syslog to splunk instance? Hi, We are trying to send syslogs from 3 different enpoints from different suppliers to an ubuntu 20.04 server. I'm r... by dminguez Loves-to-Learn in Deployment Architecture 03-15-2022 0 4	0	4
Splunk Enterprise (Windows): move to new hardware and then upgrade Hello everybody,I am upgrading Splunk Enterprise from 7.3.X to 8.2.5 (Windows). Due to the compatibility, I also need... by Marco-IT Path Finder in Deployment Architecture 03-15-2022 0 6	0	6
How do I determine the number of buckets across my indexer cluster? Is there a command I can execute? Is there an App I can deploy to see this information? Thank you. by jackgordon New Member in Deployment Architecture 03-14-2022 0 2	0	2