Deployment Architecture

Community Activity

Why do forwarders not show up in forwarder management? i installed a new splunk enterprise server and configured it as deploy server as documented here:https://docs.splunk.... by pbnl Path Finder in Deployment Architecture 03-24-2022 0 3	0	3
What are some best practices for deploying new Splunk cluster step-by-step? Hello guys, I would like to have best practices regarding deploying new Splunk cluster V8, could you say if correct a... by splunkreal Influencer in Deployment Architecture 03-24-2022 0 5	0	5
After upgrading from 7.3.0 to 8.0.0, Why does Splunk Web server turns out the ERROR message? I upgraded splunk enterprise instance from 7.3.0 to 8.0.0. All preliminary checks passed when splunk restarting.But w... by yeaobin New Member in Deployment Architecture 03-23-2022 0 4	0	4
What is Index Retention Policy for maximum storage usage? hi all, I am considering updating our index retention policy. However, I am not sure how to choose the maximum possib... by daisy Explorer in Deployment Architecture 03-23-2022 0 0	0	0
Can I add a Linux indexer as a search peer to a Windows search head? Hi, I have customers running Splunk on Windows on Nutanix. I'd like to take advantage of Smart Store, which requires ... by jeremyhagand61 Communicator in Deployment Architecture 03-23-2022 0 1	0	1
How to change the certain fonts color in labels of dashboard? I would like to ask if it's possible to change the certain fonts color in the label For exampleaaaaa / bbbbb I would ... by akoy New Member in Deployment Architecture 03-22-2022 0 6	0	6
Why did our Splunk DB connect 380 fail to start Task server on Linux machine? Hello Splunkers, I need urgent help on how to fix the below issueDBX 2.PNG DBX.PNG I need to configure splunk DB c... by Muwafi Path Finder in Deployment Architecture 03-22-2022 0 7	0	7
Indexes.conf Stanza Storage for Indexer Cluster Settings Calculation Hello all. Thanks in advance for your assistance. I have a 6 node index cluster with a search factor of 6 and replica... by keithevanscdcr Explorer in Deployment Architecture 03-17-2022 0 0	0	0
How to update TA via Deployment Server? Hi all, from the available documentation, I am not getting how to practically update TA via Deplyoment server (i.e. d... by daisy Explorer in Deployment Architecture 03-17-2022 0 5	0	5
Can splunk Search Head and Indexer span across multiple AWS accounts? In our enterprise, there is already another team which has setup Splunk Search Heads and Indexers in their own AWS ac... by ramos Engager in Deployment Architecture 03-17-2022 0 6	0	6
Db connect output cron job not run on schedule after day light saving I am running db connect version 3.4.2 on Splunk 8.2.4. I have many splunk db connect output cron jobs scheduled at 6 ... by splunkhu123 Loves-to-Learn in Deployment Architecture 03-16-2022 0 0	0	0
How do you stop data replication midway and control the timing during Index Clustering? hi everyone, i have some doubts in indexer clustering how to stop data replication ? please provide splunk documenta... by human96 Communicator in Deployment Architecture 03-16-2022 0 1	0	1
Can microsoft defender add on use certificates? Hi Experts, would like to check if anyone tried using certificates for the Microsoft defender add-on. how / where do ... by siuolkl Explorer in Deployment Architecture 03-16-2022 0 3	0	3
How to fix the Splunk LDAP AD SYN issue ? Hi All, One of our Cyber security person facing a strange issue while trying to access the data from the Splunk searc... by Hemnaath Motivator in Deployment Architecture 03-16-2022 0 0	0	0
Is there a limit to the number of sessions that can be logged in at the same time with one account? Hi Splunker !kizukuri_0-1647346484308.png I want many guests to log in with a common guest account to view Splunk En... by kizukuri Explorer in Deployment Architecture 03-15-2022 0 7	0	7
Why is linux collector server not reporting syslog to splunk instance? Hi, We are trying to send syslogs from 3 different enpoints from different suppliers to an ubuntu 20.04 server. I'm r... by dminguez Loves-to-Learn in Deployment Architecture 03-15-2022 0 4	0	4
Splunk Enterprise (Windows): move to new hardware and then upgrade Hello everybody,I am upgrading Splunk Enterprise from 7.3.X to 8.2.5 (Windows). Due to the compatibility, I also need... by Marco-IT Path Finder in Deployment Architecture 03-15-2022 0 6	0	6
How do I determine the number of buckets across my indexer cluster? Is there a command I can execute? Is there an App I can deploy to see this information? Thank you. by jackgordon New Member in Deployment Architecture 03-14-2022 0 2	0	2
What would be the best site search factor & site replication factor for a 3-sites multisite clustering? Hi All,I am going to work on a multisite architecture (3-sites) where we are keeping 6 indexers in a cluster (2 in e... by sushree1234 Explorer in Deployment Architecture 03-09-2022 0 9	0	9
Splunk purchase - Some questions Hi,We are going to evaluate Splunk but we are not sure that it will serve everything we need, to see if you can help ... by mgfeal Engager in Deployment Architecture 03-09-2022 0 1	0	1
How to clean a clustered index? What's the best way to completely clean an index in a clustered environment? by dart Splunk Employee in Deployment Architecture 03-08-2022 10 16	10	16
Why does Timechart only shows Nulls on Dashboard? Hey, I am using a timechart on my dashboard, but it only shows NULL values. When I run the same search on search cons... by P_Orourke Loves-to-Learn Lots in Deployment Architecture 03-08-2022 0 1	0	1
Search Head Cluster unable to bootstrap captain and members I am trying to create my Search head captain using bootstrap but I end up with the error (URI=https:myinstance/servic... by ephremzw Loves-to-Learn Everything in Deployment Architecture 03-04-2022 0 1	0	1
In need of Splunk Web configuration guidance- Is it possible to set up access depending on physical access? Hello, I hope to get some guidance regarding configuring a Splunk web interface to be public facing while keeping th... by mmichel Engager in Deployment Architecture 03-04-2022 0 1	0	1
Removing Log4j Version 2 from Splunk Enterprise - Disabling the default Bucket Copy Trigger Greetings,Where can I disable the default Bucket Copy Trigger search to prevent jar files from returning in Splunk? A... by KayBeesKnees83 Path Finder in Deployment Architecture 03-03-2022 0 14	0	14