Deployment Architecture

Community Activity

can we store data on search head ??? Generally indexer is used to store indexes but in the standalone architecture how data is stored ??? by krushivasani Engager in Deployment Architecture 01-07-2022 0 3	0	3
How to migrate data of cold and thawed path to different location? Hi all,I have following situation.We had an indexer cluster with 4 peers were is currently still enough storage on ou... by klowk Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Will the maxHotSpanSecs roll my buckets from warm to cold? Hello,I am wondering when my index will roll from warm to cold with the settings below, the rest of the settings is d... by erw550 Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Search head cluster, Lookup too big Hello, I have a question regarding replication of lookups on a search head cluster containing 3 search heads.The issu... by vicpet New Member in Deployment Architecture 01-05-2022 0 1	0	1
What communication between dashboard and Infrastructure Hi, I 'm new to Splunk, but I need some answers pretty fast. We are invited to insource Infrastructure monitoring and... by Wim New Member in Deployment Architecture 01-04-2022 0 3	0	3
When will my buckets roll? Hello,We have a clustered environment which collects 2000gb+/day with indexes.conf settings below and the rest of the... by erw550 Path Finder in Deployment Architecture 12-29-2021 0 1	0	1
Deployment Server compatibility Hi All,Does Deployment Server compatible with deployment client that has higher version?For example : Deployment Serv... by hketer Path Finder in Deployment Architecture 12-29-2021 0 4	0	4
Splunk instances decommission and backup/archive hi Experts,We are planning to decommission on-prem Splunk Ent 8.0.can anyone advise on how to backup and archive exis... by abhic25 Explorer in Deployment Architecture 12-24-2021 0 4	0	4
Cluster Upgrade 8.0 > 8.2: KVStore Migration to WiredTiger We are planning upgrade our clustered deployment from 8.0.5 to 8.2.1In case we plan to migrate the KVStore engine to ... by anirbandasdeb Path Finder in Deployment Architecture 12-23-2021 0 1	0	1
windows TA splunk-perfmon.exe will be terminated. Windows server installs a universal forwarder and receives data, but sometimes the forwarder is shut down. If you loo... by noott211 Path Finder in Deployment Architecture 12-22-2021 0 1	0	1
Nutanix to Splunk integration Where can i find more information about Nutantix to Splunk cloud integration.I know there's a app for Nutanix Flow Ce... by HHassell Loves-to-Learn in Deployment Architecture 12-21-2021 0 1	0	1
How to extend restart period for single indexer that I wish to take offline Hi I have a single indexer in my splunk on-prem environment. I wish to take the Indexer offline so that I can perform... by ezmo1982 Path Finder in Deployment Architecture 12-18-2021 0 3	0	3
Hot buckets fix? How do I fix this issue? I found this search query that pulled up the indexes that was the problem. Root Cause(s): Th... by splunktrainingu Communicator in Deployment Architecture 12-17-2021 2 1	2	1
RSA Netwitness to Splunk Hi, While moving from RSA NETWITNESS SIEM TOOL to SPLUNK SIEM tool, what are the checklists to be considered and how ... by VijaySrrie Builder in Deployment Architecture 12-16-2021 0 1	0	1
Can a Splunk deployment configured in AWS cloud (IaaS) read and write to both S3 buckets and EBS? Hello,I am a bit confused as to how Splunk manages its indexes through AWS cloud services, and I am not sure whether ... by andrewtrobec Motivator in Deployment Architecture 12-16-2021 0 2	0	2
Moving warm buckets to cold Buckets manually My indexer is totally full now and new items cannot be index. The previous settings also seems to be not working. [ro... by johnlzy0408 Loves-to-Learn Everything in Deployment Architecture 12-16-2021 0 1	0	1
proper location for phoneHomeIntervalInSecs We are just now beginning to deploy the splunkforwarder for linux in our Large organizationWe are running the agent a... by vhaisddellaj New Member in Deployment Architecture 12-14-2021 0 3	0	3
universal forwarder and rsyslog server behind a LB F5 My deployment consists of 2 servers to collect syslog sources. On each server is installed a rsyslog daemon that rece... by pmerlin1 Path Finder in Deployment Architecture 12-13-2021 0 1	0	1
Reasons for NEEDING minimum hardware requirements Hello Fellow Splunkers!Can someone please explain the need for deploying Splunk with the minimum hardware requirement... by astackpole Path Finder in Deployment Architecture 12-09-2021 1 2	1	2
Cold bucket storage options in Azure Hi! We´re looking into deploying Splunk in Azure, and I wonder if anyone has good suggestions to do long term (3 year... by madonna Loves-to-Learn in Deployment Architecture 12-09-2021 0 0	0	0
Sporadic "Timed out waiting for peer" messsages when querying search peers / indexer cluster Recently we've been noticing a lot of searches have been getting connection timeouts when trying to query our indexer... by althomas Communicator in Deployment Architecture 12-07-2021 0 9	0	9
Dashboard Studio not loading in Firefox in Splunk 8.2.2.2 We recently upgraded our Splunk from 8.1.4 to 8.2.2.2. After the upgrade the dashboard studio is working fine in Goog... by priyanka_231019 Explorer in Deployment Architecture 12-05-2021 0 3	0	3
Change Universal forwarder metrics from _internal index to another index possible? Hi,I want to monitor a whole bunch of Universal Forwarders that i have set up and configured. All data from these are... by hethu Path Finder in Deployment Architecture 12-01-2021 0 1	0	1
CLI command completion broken Since I realized it existed, I've setup my environment to source the $SPLUNK_HOME/share/splunk/cli-command-completion... by Sivrat Path Finder in Deployment Architecture 12-01-2021 0 6	0	6
Building architecture with 3 servers I have 3 servers (2 of them have 4x600GB hdd and one has 6x600GBHDD and 2x800GB SSD).I want to build small splunk arc... by A1 New Member in Deployment Architecture 12-01-2021 0 0	0	0