Deployment Architecture

Community Activity

The percentage of non high priority searches delayed Hi Splunkers,I am getting below error on Clustered Search heard,"The percentage of non high priority searches delayed... by bsanjeeva Explorer in Deployment Architecture 01-12-2022 1 5	1	5
SF and RF - How much count should we keep ? What is the reason behind keeping default RF - 3 and SF - 2 ?? why splunk recommad it ?? what happen if we keep RF - ... by krushivasani Engager in Deployment Architecture 01-11-2022 0 2	0	2
How is data replicated in Clustering ?? What Happen if Cluster master goes down ?? How is data replicated in Clustering ?? What Happen if Cluster master goes down ?? by krushivasani Engager in Deployment Architecture 01-11-2022 0 2	0	2
Modify Splunk health checks - The percentage of small buckets created over the last hour is high Hello all,Looking for a way to modify the Splunk Health Check for small buckets. Specifically, I would like the healt... by _joe Contributor in Deployment Architecture 01-10-2022 0 1	0	1
Splunk Sizing Hello,We are sizing a Splunk solution for internal usage. Referring to the documentation, it is said that Mid size In... by sidtalup27 Explorer in Deployment Architecture 01-07-2022 0 2	0	2
can we store data on search head ??? Generally indexer is used to store indexes but in the standalone architecture how data is stored ??? by krushivasani Engager in Deployment Architecture 01-07-2022 0 3	0	3
How to migrate data of cold and thawed path to different location? Hi all,I have following situation.We had an indexer cluster with 4 peers were is currently still enough storage on ou... by klowk Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Will the maxHotSpanSecs roll my buckets from warm to cold? Hello,I am wondering when my index will roll from warm to cold with the settings below, the rest of the settings is d... by erw550 Path Finder in Deployment Architecture 01-07-2022 0 1	0	1
Search head cluster, Lookup too big Hello, I have a question regarding replication of lookups on a search head cluster containing 3 search heads.The issu... by vicpet New Member in Deployment Architecture 01-05-2022 0 1	0	1
What communication between dashboard and Infrastructure Hi, I 'm new to Splunk, but I need some answers pretty fast. We are invited to insource Infrastructure monitoring and... by Wim New Member in Deployment Architecture 01-04-2022 0 3	0	3
When will my buckets roll? Hello,We have a clustered environment which collects 2000gb+/day with indexes.conf settings below and the rest of the... by erw550 Path Finder in Deployment Architecture 12-29-2021 0 1	0	1
Deployment Server compatibility Hi All,Does Deployment Server compatible with deployment client that has higher version?For example : Deployment Serv... by hketer Path Finder in Deployment Architecture 12-29-2021 0 4	0	4
Splunk instances decommission and backup/archive hi Experts,We are planning to decommission on-prem Splunk Ent 8.0.can anyone advise on how to backup and archive exis... by abhic25 Explorer in Deployment Architecture 12-24-2021 0 4	0	4
Cluster Upgrade 8.0 > 8.2: KVStore Migration to WiredTiger We are planning upgrade our clustered deployment from 8.0.5 to 8.2.1In case we plan to migrate the KVStore engine to ... by anirbandasdeb Path Finder in Deployment Architecture 12-23-2021 0 1	0	1
windows TA splunk-perfmon.exe will be terminated. Windows server installs a universal forwarder and receives data, but sometimes the forwarder is shut down. If you loo... by noott211 Path Finder in Deployment Architecture 12-22-2021 0 1	0	1
Nutanix to Splunk integration Where can i find more information about Nutantix to Splunk cloud integration.I know there's a app for Nutanix Flow Ce... by HHassell Loves-to-Learn in Deployment Architecture 12-21-2021 0 1	0	1
How to extend restart period for single indexer that I wish to take offline Hi I have a single indexer in my splunk on-prem environment. I wish to take the Indexer offline so that I can perform... by ezmo1982 Path Finder in Deployment Architecture 12-18-2021 0 3	0	3
Hot buckets fix? How do I fix this issue? I found this search query that pulled up the indexes that was the problem. Root Cause(s): Th... by splunktrainingu Communicator in Deployment Architecture 12-17-2021 2 1	2	1
RSA Netwitness to Splunk Hi, While moving from RSA NETWITNESS SIEM TOOL to SPLUNK SIEM tool, what are the checklists to be considered and how ... by VijaySrrie Builder in Deployment Architecture 12-16-2021 0 1	0	1
Can a Splunk deployment configured in AWS cloud (IaaS) read and write to both S3 buckets and EBS? Hello,I am a bit confused as to how Splunk manages its indexes through AWS cloud services, and I am not sure whether ... by andrewtrobec Motivator in Deployment Architecture 12-16-2021 0 2	0	2
Moving warm buckets to cold Buckets manually My indexer is totally full now and new items cannot be index. The previous settings also seems to be not working. [ro... by johnlzy0408 Loves-to-Learn Everything in Deployment Architecture 12-16-2021 0 1	0	1
proper location for phoneHomeIntervalInSecs We are just now beginning to deploy the splunkforwarder for linux in our Large organizationWe are running the agent a... by vhaisddellaj New Member in Deployment Architecture 12-14-2021 0 3	0	3
universal forwarder and rsyslog server behind a LB F5 My deployment consists of 2 servers to collect syslog sources. On each server is installed a rsyslog daemon that rece... by pmerlin1 Path Finder in Deployment Architecture 12-13-2021 0 1	0	1
Reasons for NEEDING minimum hardware requirements Hello Fellow Splunkers!Can someone please explain the need for deploying Splunk with the minimum hardware requirement... by astackpole Path Finder in Deployment Architecture 12-09-2021 1 2	1	2
Cold bucket storage options in Azure Hi! We´re looking into deploying Splunk in Azure, and I wonder if anyone has good suggestions to do long term (3 year... by madonna Loves-to-Learn in Deployment Architecture 12-09-2021 0 0	0	0