Deployment Architecture

Community Activity

How to add / remove SHC members with static captain? Hello,I have a three member SHC (splunk 8.0.5.1) and want to replace the members one by one with new instances runnin... by vgrote Path Finder in Deployment Architecture 08-30-2021 0 5	0	5
Deployment Server client restarts Sorry, I have a newbie question. I want to add a deployment client to an existing server class that has apps which a... by hank72 Path Finder in Deployment Architecture 08-26-2021 0 1	0	1
Bucket replication issues - No possible srcs for replication I have approx. 35k buckets under Fixup Tasks Pending (35k).Under Fixup Category Search FactorCurrent Status - Missing... by damode Motivator in Deployment Architecture 08-26-2021 1 1	1	1
Deploying SSL between Forwarder and Indexer Hello,I wanted to request help with how configuring correctly SSL between Universal -> Indexer.I tried following thi... by kobibi11 New Member in Deployment Architecture 08-25-2021 0 1	0	1
DDAA If my clustered Splunk cloud indexers contain data that has been deleted (marked for deletion) and that index hits it... by Wesport New Member in Deployment Architecture 08-24-2021 0 0	0	0
Why can't I increase the number of open files? Hi, I'm running on Red Hat 7.3 and Splunk version is 7.3. The following edits were made to the /etc/security/limits.c... by mufthmu Path Finder in Deployment Architecture 08-24-2021 0 12	0	12
Knowledge bundle replication failed, checksum mismatch Hello,I'm upgrading a search head from 7.3.0 to 8.2.1. First I upgraded it to 8.1.5 and I didn't experienced any prob... by tsabu New Member in Deployment Architecture 08-23-2021 0 1	0	1
Is anyone running Splunk in AWS ECS Fargate? I was wondering if anyone has successfully deployed a clustered instance of Splunk enterprise on AWS ECS Fargate. I'm... by joeldavideng Path Finder in Deployment Architecture 08-23-2021 0 0	0	0
What is the path of Splunk data in any Linux server? I spoke with Linux admin to allow permissions to Splunk app, he asked me what is the path of Splunk logs so that he c... by splunkiri Engager in Deployment Architecture 08-23-2021 0 11	0	11
Can Universal Forwarder listen to an UDP port and forward to the indexer? Hello Splunkers, I have my firewall sending its logs to a CentOS server where I have the Splunk Universal forwarder c... by marcos_eng1 Explorer in Deployment Architecture 08-23-2021 0 28	0	28
Search Heads not parsing unexpectedly Hello,I need some help where to look in order to diagnostic the issue I am facing.I am using v8.0.9 in a multisite se... by adidibra Engager in Deployment Architecture 08-20-2021 0 1	0	1
log collect mode which mode does the splunk forwarder support ？ If push or pull mode is all supported， we want to know how to conf... by wangmang Engager in Deployment Architecture 08-20-2021 0 2	0	2
Bash History Logs I've read all the suggestion on importing bash history logs and tried variation of fschange, followTail and ignoreOld... by logtastic Explorer in Deployment Architecture 08-19-2021 0 0	0	0
Add-on builder v4.0.0 Is that correct that Splunk add-on builder v4.0.0:sets read/write permissions for add-on's files. "execute" permissio... by Tara Loves-to-Learn Lots in Deployment Architecture 08-18-2021 0 0	0	0
Splunk Indexer services admin bundle errors I have created a new cluster with a Master, a search head, indexers and forwarders, similar to the architecture here ... by govindashwin8 Loves-to-Learn Lots in Deployment Architecture 08-18-2021 0 10	0	10
SSL communication between F5 VIP and SHC I have a SHC consisting of 3x SHs with https enabled.are there any steps I need to do from Splunks end to enable a sp... by ialahdal Path Finder in Deployment Architecture 08-18-2021 0 1	0	1
Critical Issue - Splunk Indexer is Not Booting! Dears,Hope you're doing great.Please note that the Splunk indexer is not booting but other servers is booting and wor... by yousefhawwari Loves-to-Learn in Deployment Architecture 08-17-2021 0 2	0	2
Forward to indexer all except from particular path Hello,I would like to exclude just one user from forwarding logs and I am thinking if my solution will work:in inputs... by Wojt3k Engager in Deployment Architecture 08-16-2021 0 2	0	2
GUID of a search-head cluster I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.https://docs.splunk.com/Docum... by PickleRick SplunkTrust in Deployment Architecture 08-13-2021 0 2	0	2
_introspection index error of hot bucket Hi, I am getting below error for '_introspection' index- The percentage of small buckets (75%) created over the last... by ips_mandar Builder in Deployment Architecture 08-12-2021 0 4	0	4
Unable to push the config from cluster master Hi All, We are trying to push the props and transforms config files from Cluster Master to all indexers. Source types... by syedabuthahir Explorer in Deployment Architecture 08-12-2021 0 2	0	2
Why is cluster master stuck at "Bundle validation is in progress" indefinitely after configuration-bundle update? As above, I kicked off an update and the cluster master is stuck at "Bundle validation is in progress" and has been f... by nwales Path Finder in Deployment Architecture 08-12-2021 2 13	2	13
Error "The maximum number of concurrent running jobs for this historical scheduled search on this cluster has been reached" after upgrade to 8.0.1 We have search head splunk cluster. After upgrade to 8.0.1 from 7.2.6 we began to get errors like: "12-18-2019 16:47:... by gots Path Finder in Deployment Architecture 08-11-2021 0 9	0	9
Which Splunk Product is best for Infrastructure Monitoring? Hello Splunkers.We want to deploy a splunk product in our environment, to monitor Infrastructure along with some Auto... by sarvesh_11 Communicator in Deployment Architecture 08-11-2021 0 3	0	3
Role Search Restrictions - Syntax Hi all, not sure if deployment architecture was the right place to put this question. I need some clarification regar... by ft_kd02 Path Finder in Deployment Architecture 08-09-2021 0 2	0	2