Deployment Architecture

Community Activity

	CSV lookup files distribution to all instances in a Splunk cluster? Hello there! I am currently managing a Splunk Enterprise clustered environment, where I have implemented a scheduled ... by vnetrebko Explorer in Deployment Architecture 06-20-2025 0 3	0	3
	RF and SF are not meeting up Suddenly we observed /opt/data was unmounted, and ownership has changed from splunk to root. Mounted back and restart... by sandeep_A1997 Loves-to-Learn in Deployment Architecture 06-19-2025 0 3	0	3
	Does a props/transforms.conf Visio stencil exist? I see multiple versions of the inputs.conf Visio stencil however I'm looking for props.conf and transforms.conf ones.... by danielbb Motivator in Deployment Architecture 06-19-2025 0 1	0	1
	How to take back up and restore saved searches in a search head clustered environment by Jflow Splunk Employee in Deployment Architecture 06-17-2025 0 1	0	1
	Error Ingest Data AWS Cloudtrail "error=Traceback (most recent call last):" Hi Everyone, I encountered an error while ingesting sourcetype=aws:cloudtrails in AWS Apps. I attempted to ingest dat... by zksvc Contributor in Deployment Architecture 06-11-2025 0 3	0	3
	Configure SAML authentication for a search head cluster using Amazon Application Load Balancer Hello, I am Looking for details of anyone that has successfully setup a enterprise search head cluster that is behind... by lrader Observer in Deployment Architecture 06-05-2025 0 1	0	1
	Playbook not showing Hi I have created a playbook and am trying to run it from an event. But the playbook does not populate when I click o... by Sidpet Loves-to-Learn in Deployment Architecture 06-05-2025 0 1	0	1
	Splunk SOAR playbook Crowdstrike validation I have playbook that validates a url given and assigns scores to it. I am able to run the playbook successfully but d... by Sidpet Loves-to-Learn in Deployment Architecture 06-04-2025 0 3	0	3
	Openshift Support for Splunk Universal Forwarder Docker Image The splunk universal forwarder image currently is not compatible with OpenShift. The image architecture requires the ... by _KD Engager in Deployment Architecture 06-04-2025 0 2	0	2
	targetRepositoryLocation only working in global? Hello I am unable to configure targetRepositoryLocation in serverclass.conf. Only seems o work in global. Is anyone... by bmacias84 Champion in Deployment Architecture 06-03-2025 0 7	0	7
	Heavy Forwarder Data flow Hello Splunkers,I have a question around Splunk Architecture, would greatly appreciate the inputs from Architects.In ... by mohsplunking Path Finder in Deployment Architecture 06-01-2025 0 2	0	2
	jQuery Upgrade Issue - Need Guidance Hi Splunkers,I received a notice about upgrading jQuery to version 3.5 or higher, and I ran a jQuery scan through the... by sanjai Communicator in Deployment Architecture 05-30-2025 0 3	0	3
	How to add a new search head to an existing SHC? Hello , we are planning to add a new search head to our existing search head cluster. What are the steps I need to fo... by ram254481493 Explorer in Deployment Architecture 05-29-2025 0 14	0	14
	Running Cluster Masters for servers on Different RHEL version I am upgrading from RHEL 7 to RHEL 8 in light of end of support for Red Hat. We have a clustered environment. We have... by Abass42 Communicator in Deployment Architecture 05-28-2025 0 4	0	4
	Intermediate forwarders - queues blocked - TCP in refused for uptream forwarder Hi splunkers. I would like to understand a tricky point. I'm using a distributed environment with 2 intermediate uni... by _olivier_ Path Finder in Deployment Architecture 05-23-2025 0 11	0	11
	Splunk SOAR Playbook Virustotal output IP Reputation I've obtained this information from VirusTotal, and I want to create a playbook to check IP reputation and retrieve t... by zksvc Contributor in Deployment Architecture 05-23-2025 0 3	0	3
	Splunk data migration from Splunk cloud to other tool I just needed some help from Splunk regarding a request from our clients. So, a client is migrating from Splunk to Se... by ssuluguri Path Finder in Deployment Architecture 05-22-2025 0 7	0	7
	can we split a big shcluster to two small one? Now we have a big shcluster for many department users, for some reason, we must spilt a department for independent us... by liangliang Explorer in Deployment Architecture 05-20-2025 0 15	0	15
	Discrepancies between DMC server view and actual server view I had a few questions over how the DMC gathered its information for server specifications and how to extract them. I ... by Abass42 Communicator in Deployment Architecture 05-20-2025 0 9	0	9
	Can I add UBA servers as deployment server clients? Splunk PS installed UBA a while back, and I just noticed that we are not getting OS logs from those servers into Splu... by ilhwan Path Finder in Deployment Architecture 05-19-2025 0 3	0	3
	Splunk 9.3+ Deployment on CIS Red Hat 9 level 1 image - No GUI Hey Splunk Community,I was wondering if anyone has figured out what is the cause for the GUI not to work at all in a ... by jwestbank Explorer in Deployment Architecture 05-19-2025 0 11	0	11
	Suddenly, Splunk stops working Hi all, I have a Splunk server, that suddenly stops working, and i don't know why. I've added the 'Splunk enable bo... by rubeniturrieta Communicator in Deployment Architecture 05-16-2025 0 15	0	15
	UF details not reflecting in deployment server Hello Team,I am configuring Splunk, but the UF (Universal Forwarder) details are not reflecting in the Deployment Ser... by abhi Observer in Deployment Architecture 05-16-2025 0 4	0	4
	Connection problems with Universal Forwarder for Linux ARM and Splunk Cloud (SSL error) Hi everyone, I am currently trying to run the Universal Forwarder for Linux ARM on a Raspberry Pi 2 Model B with an ... by DanielaHerold New Member in Deployment Architecture 05-16-2025 0 12	0	12
	Error while deploying apps to first member [Splunk Enterprise 8.2] Hi all,I am trying to deploy my apps from the deployment server with the command: /opt/splunk/bin/splunk apply shclus... by Ciccius Explorer in Deployment Architecture 05-16-2025 0 3	0	3