Deployment Architecture

Community Activity

Are bucket corruption and configuration initialization errors related? We have been getting a lot of errors of this nature lately: [indexer] Failed to read size=1235 event(s) from rawdata... by elliotproebstel Champion in Deployment Architecture 01-23-2022 0 2	0	2
Firewall openings for communication between indexer and license manager Hello,In which direction must firewall openings be configured for indexers and search heads to be able to communicate... by erw550 Path Finder in Deployment Architecture 01-21-2022 0 4	0	4
Health indicator red: Index Processor -> Buckets - Maybe "Failed to remove summary of" ... ? but files are not present Hi everyone, I have a problem with an Indexer. Inside the Health Indicator (the small icon beside the username) the ... by bdraeger Engager in Deployment Architecture 01-20-2022 4 1	4	1
Citrix Target Server Image from Master Golden Image We are utilizing a deployment server to push out UF agent config to our Citrix VM, however, not all devices are repor... by apple75 New Member in Deployment Architecture 01-20-2022 0 0	0	0
Having to restart index cluster Hi Splunkers, I am experiencing issues with an index cluster and it would be great if you could help me out.Every tim... by johannamayer New Member in Deployment Architecture 01-20-2022 0 1	0	1
Best practice to ingest data from external data sources Hi, which is the best practice to ingest data from external (internet-based) data sources, when only syslog or native... by marzio New Member in Deployment Architecture 01-19-2022 0 4	0	4
Issue in Splunk enterprise Dashboard beta app: Loading options in drop down takes too long time We developed a dashboard with custom layout using the enterprise dashboard beta app.There we used a simple feature to... by madhanbabu New Member in Deployment Architecture 01-17-2022 0 0	0	0
Minimum requirement for splunk clustered environment Hi,What is the Minimum requirement for splunk clustered environment?How many searchheads/Indexers should be in place?... by VijaySrrie Builder in Deployment Architecture 01-17-2022 0 1	0	1
Splunk SHC Load Balancing I am trying to configure a LB for a Splunk SHC, but I am unable to find any resources on how to do it. It is my first... by andrew_burnett Path Finder in Deployment Architecture 01-14-2022 0 2	0	2
Indexer server was down & data durability status red Hi,I have distrubuted setup. Each site has 1 indexer /1 search head & 1 master server.They are part of cluster.One of... by nilupat Engager in Deployment Architecture 01-13-2022 0 2	0	2
The percentage of non high priority searches delayed Hi Splunkers,I am getting below error on Clustered Search heard,"The percentage of non high priority searches delayed... by bsanjeeva Explorer in Deployment Architecture 01-12-2022 1 5	1	5
SF and RF - How much count should we keep ? What is the reason behind keeping default RF - 3 and SF - 2 ?? why splunk recommad it ?? what happen if we keep RF - ... by krushivasani Engager in Deployment Architecture 01-11-2022 0 2	0	2
How is data replicated in Clustering ?? What Happen if Cluster master goes down ?? How is data replicated in Clustering ?? What Happen if Cluster master goes down ?? by krushivasani Engager in Deployment Architecture 01-11-2022 0 2	0	2
Modify Splunk health checks - The percentage of small buckets created over the last hour is high Hello all,Looking for a way to modify the Splunk Health Check for small buckets. Specifically, I would like the healt... by _joe Contributor in Deployment Architecture 01-10-2022 0 1	0	1
Splunk Sizing Hello,We are sizing a Splunk solution for internal usage. Referring to the documentation, it is said that Mid size In... by sidtalup27 Explorer in Deployment Architecture 01-07-2022 0 2	0	2
can we store data on search head ??? Generally indexer is used to store indexes but in the standalone architecture how data is stored ??? by krushivasani Engager in Deployment Architecture 01-07-2022 0 3	0	3
How to migrate data of cold and thawed path to different location? Hi all,I have following situation.We had an indexer cluster with 4 peers were is currently still enough storage on ou... by klowk Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Will the maxHotSpanSecs roll my buckets from warm to cold? Hello,I am wondering when my index will roll from warm to cold with the settings below, the rest of the settings is d... by erw550 Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Search head cluster, Lookup too big Hello, I have a question regarding replication of lookups on a search head cluster containing 3 search heads.The issu... by vicpet New Member in Deployment Architecture 01-05-2022 0 1	0	1
What communication between dashboard and Infrastructure Hi, I 'm new to Splunk, but I need some answers pretty fast. We are invited to insource Infrastructure monitoring and... by Wim New Member in Deployment Architecture 01-04-2022 0 3	0	3
When will my buckets roll? Hello,We have a clustered environment which collects 2000gb+/day with indexes.conf settings below and the rest of the... by erw550 Path Finder in Deployment Architecture 12-29-2021 0 1	0	1
Deployment Server compatibility Hi All,Does Deployment Server compatible with deployment client that has higher version?For example : Deployment Serv... by hketer Path Finder in Deployment Architecture 12-29-2021 0 4	0	4
Splunk instances decommission and backup/archive hi Experts,We are planning to decommission on-prem Splunk Ent 8.0.can anyone advise on how to backup and archive exis... by abhic25 Explorer in Deployment Architecture 12-24-2021 0 4	0	4
Cluster Upgrade 8.0 > 8.2: KVStore Migration to WiredTiger We are planning upgrade our clustered deployment from 8.0.5 to 8.2.1In case we plan to migrate the KVStore engine to ... by anirbandasdeb Path Finder in Deployment Architecture 12-23-2021 0 1	0	1
windows TA splunk-perfmon.exe will be terminated. Windows server installs a universal forwarder and receives data, but sometimes the forwarder is shut down. If you loo... by noott211 Path Finder in Deployment Architecture 12-22-2021 0 1	0	1