Deployment Architecture

Community Activity

Forward to indexer all except from particular path Hello,I would like to exclude just one user from forwarding logs and I am thinking if my solution will work:in inputs... by Wojt3k Engager in Deployment Architecture 08-16-2021 0 2	0	2
GUID of a search-head cluster I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.https://docs.splunk.com/Docum... by PickleRick SplunkTrust in Deployment Architecture 08-13-2021 0 2	0	2
_introspection index error of hot bucket Hi, I am getting below error for '_introspection' index- The percentage of small buckets (75%) created over the last... by ips_mandar Builder in Deployment Architecture 08-12-2021 0 4	0	4
Unable to push the config from cluster master Hi All, We are trying to push the props and transforms config files from Cluster Master to all indexers. Source types... by syedabuthahir Explorer in Deployment Architecture 08-12-2021 0 2	0	2
Why is cluster master stuck at "Bundle validation is in progress" indefinitely after configuration-bundle update? As above, I kicked off an update and the cluster master is stuck at "Bundle validation is in progress" and has been f... by nwales Path Finder in Deployment Architecture 08-12-2021 2 13	2	13
Error "The maximum number of concurrent running jobs for this historical scheduled search on this cluster has been reached" after upgrade to 8.0.1 We have search head splunk cluster. After upgrade to 8.0.1 from 7.2.6 we began to get errors like: "12-18-2019 16:47:... by gots Path Finder in Deployment Architecture 08-11-2021 0 9	0	9
Which Splunk Product is best for Infrastructure Monitoring? Hello Splunkers.We want to deploy a splunk product in our environment, to monitor Infrastructure along with some Auto... by sarvesh_11 Communicator in Deployment Architecture 08-11-2021 0 3	0	3
Role Search Restrictions - Syntax Hi all, not sure if deployment architecture was the right place to put this question. I need some clarification regar... by ft_kd02 Path Finder in Deployment Architecture 08-09-2021 0 2	0	2
Test SHC running out of mem every day. Hello,I have a test environment and the SHC members aren't allocated the recommended resources (because it's test) ho... by Jarohnimo Builder in Deployment Architecture 08-07-2021 0 1	0	1
Deployment Server: Best practices for scaling We've currently got just one DS in our environment handling about 1100 forwarders. Performance has been pretty stable... by coltwanger Contributor in Deployment Architecture 08-06-2021 2 8	2	8
How to increase current log retention configuration of an index? Hello,I've below configuration for one index.maxTotalDataSizeMB = 333400maxDataSize = auto_high_volumehomePath = volu... by akash99 Loves-to-Learn in Deployment Architecture 08-03-2021 0 1	0	1
Failed to update bucket with remote metadata Hello All, We have an index cluster which utilizes SmartStore in AWS S3. Things appear to be working but we have obs... by andymalato Explorer in Deployment Architecture 08-03-2021 0 0	0	0
Can't open splunk from masked domain Whenever I try to open Splunk from a masked URL (a URL that points to a URL but shows the first URL in the browser se... by johng2006 New Member in Deployment Architecture 08-02-2021 0 0	0	0
deploymentclient.conf getting overwritten We are in the process of migrating a lot of hosts to report to a new deployment server. The deploymentclient.conf fil... by osasfrancis Path Finder in Deployment Architecture 08-02-2021 0 6	0	6
How hot bucket timespan is set ? Hi Splunkers, While splunking on bucket statistics - I've noticed that despite the fact of default 90 days set for ma... by data_beast Explorer in Deployment Architecture 08-02-2021 0 0	0	0
indexed the data only once Hi,is it possible to indexed the event only once. Thank you in advance. by dhirendra761 Contributor in Deployment Architecture 07-29-2021 0 3	0	3
integrate standalone server into index cluster for search only Hello All,We currently have a single standalone deployment (index and search head on single system). In addition, we... by andymalato Explorer in Deployment Architecture 07-29-2021 0 2	0	2
Multisite Cluster with only one site We are running Splunk on Windows and are moving from a multisite cluster with two sites to a single site. Are there a... by bk Engager in Deployment Architecture 07-27-2021 1 1	1	1
About update Splunkbase App with the Latest Add-On Builder by 8/31/21 for Future Compatibility email.. Dear Splunk community,I received an alert mail from Splunk about the need to update my splunkbase app with latest ad... by tarokker New Member in Deployment Architecture 07-27-2021 0 0	0	0
Missing forwarders management Hello guys,how do you handle missing forwarders (deleted VMs for instance)?Do you go to "Forwarder management" then "... by splunkreal Influencer in Deployment Architecture 07-26-2021 0 5	0	5
How to configure OKTA saml authentication for a SHC Cluster without SLO errors? Scenario:3 node SHC behind okta authSuppose you have a URL splunk-foo.com points to an ALB which load balances user l... by Glasses Builder in Deployment Architecture 07-26-2021 0 3	0	3
Hardware recommended for indexers Hi Splunkers!I currently use 3 indexers in order to ingest my data and respond to search jobs. We use ES in our deplo... by m_zandinia Path Finder in Deployment Architecture 07-25-2021 0 3	0	3
Migrating scheduled searches/alerts from single-node installation to search head cluster I'm currently working on migration of a single-node installation to indexer and search head clusters.Specifically on ... by mattbg Path Finder in Deployment Architecture 07-23-2021 0 1	0	1
Indexer performance problems after upgrade Hello,I hope you can help me to figure out what is going on.I have a distributed environment, a search head and two i... by cjaramilloc Explorer in Deployment Architecture 07-22-2021 0 1	0	1
Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew Hello my friends I had a problem for 2 days I am not allowed to search in Splanki need reset key licensetankful by hamidreza123 New Member in Deployment Architecture 07-21-2021 0 1	0	1