Deployment Architecture

Community Activity

Is anyone running Splunk in AWS ECS Fargate? I was wondering if anyone has successfully deployed a clustered instance of Splunk enterprise on AWS ECS Fargate. I'm... by joeldavideng Path Finder in Deployment Architecture 08-23-2021 0 0	0	0
What is the path of Splunk data in any Linux server? I spoke with Linux admin to allow permissions to Splunk app, he asked me what is the path of Splunk logs so that he c... by splunkiri Engager in Deployment Architecture 08-23-2021 0 11	0	11
Can Universal Forwarder listen to an UDP port and forward to the indexer? Hello Splunkers, I have my firewall sending its logs to a CentOS server where I have the Splunk Universal forwarder c... by marcos_eng1 Explorer in Deployment Architecture 08-23-2021 0 28	0	28
Search Heads not parsing unexpectedly Hello,I need some help where to look in order to diagnostic the issue I am facing.I am using v8.0.9 in a multisite se... by adidibra Engager in Deployment Architecture 08-20-2021 0 1	0	1
log collect mode which mode does the splunk forwarder support ？ If push or pull mode is all supported， we want to know how to conf... by wangmang Engager in Deployment Architecture 08-20-2021 0 2	0	2
Bash History Logs I've read all the suggestion on importing bash history logs and tried variation of fschange, followTail and ignoreOld... by logtastic Explorer in Deployment Architecture 08-19-2021 0 0	0	0
Add-on builder v4.0.0 Is that correct that Splunk add-on builder v4.0.0:sets read/write permissions for add-on's files. "execute" permissio... by Tara Loves-to-Learn Lots in Deployment Architecture 08-18-2021 0 0	0	0
Splunk Indexer services admin bundle errors I have created a new cluster with a Master, a search head, indexers and forwarders, similar to the architecture here ... by govindashwin8 Loves-to-Learn Lots in Deployment Architecture 08-18-2021 0 10	0	10
SSL communication between F5 VIP and SHC I have a SHC consisting of 3x SHs with https enabled.are there any steps I need to do from Splunks end to enable a sp... by ialahdal Path Finder in Deployment Architecture 08-18-2021 0 1	0	1
Critical Issue - Splunk Indexer is Not Booting! Dears,Hope you're doing great.Please note that the Splunk indexer is not booting but other servers is booting and wor... by yousefhawwari Loves-to-Learn in Deployment Architecture 08-17-2021 0 2	0	2
Forward to indexer all except from particular path Hello,I would like to exclude just one user from forwarding logs and I am thinking if my solution will work:in inputs... by Wojt3k Engager in Deployment Architecture 08-16-2021 0 2	0	2
GUID of a search-head cluster I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.https://docs.splunk.com/Docum... by PickleRick SplunkTrust in Deployment Architecture 08-13-2021 0 2	0	2
_introspection index error of hot bucket Hi, I am getting below error for '_introspection' index- The percentage of small buckets (75%) created over the last... by ips_mandar Builder in Deployment Architecture 08-12-2021 0 4	0	4
Unable to push the config from cluster master Hi All, We are trying to push the props and transforms config files from Cluster Master to all indexers. Source types... by syedabuthahir Explorer in Deployment Architecture 08-12-2021 0 2	0	2
Why is cluster master stuck at "Bundle validation is in progress" indefinitely after configuration-bundle update? As above, I kicked off an update and the cluster master is stuck at "Bundle validation is in progress" and has been f... by nwales Path Finder in Deployment Architecture 08-12-2021 2 13	2	13
Error "The maximum number of concurrent running jobs for this historical scheduled search on this cluster has been reached" after upgrade to 8.0.1 We have search head splunk cluster. After upgrade to 8.0.1 from 7.2.6 we began to get errors like: "12-18-2019 16:47:... by gots Path Finder in Deployment Architecture 08-11-2021 0 9	0	9
Which Splunk Product is best for Infrastructure Monitoring? Hello Splunkers.We want to deploy a splunk product in our environment, to monitor Infrastructure along with some Auto... by sarvesh_11 Communicator in Deployment Architecture 08-11-2021 0 3	0	3
Role Search Restrictions - Syntax Hi all, not sure if deployment architecture was the right place to put this question. I need some clarification regar... by ft_kd02 Path Finder in Deployment Architecture 08-09-2021 0 2	0	2
Test SHC running out of mem every day. Hello,I have a test environment and the SHC members aren't allocated the recommended resources (because it's test) ho... by Jarohnimo Builder in Deployment Architecture 08-07-2021 0 1	0	1
Deployment Server: Best practices for scaling We've currently got just one DS in our environment handling about 1100 forwarders. Performance has been pretty stable... by coltwanger Contributor in Deployment Architecture 08-06-2021 2 8	2	8
How to increase current log retention configuration of an index? Hello,I've below configuration for one index.maxTotalDataSizeMB = 333400maxDataSize = auto_high_volumehomePath = volu... by akash99 Loves-to-Learn in Deployment Architecture 08-03-2021 0 1	0	1
Failed to update bucket with remote metadata Hello All, We have an index cluster which utilizes SmartStore in AWS S3. Things appear to be working but we have obs... by andymalato Explorer in Deployment Architecture 08-03-2021 0 0	0	0
Can't open splunk from masked domain Whenever I try to open Splunk from a masked URL (a URL that points to a URL but shows the first URL in the browser se... by johng2006 New Member in Deployment Architecture 08-02-2021 0 0	0	0
deploymentclient.conf getting overwritten We are in the process of migrating a lot of hosts to report to a new deployment server. The deploymentclient.conf fil... by osasfrancis Path Finder in Deployment Architecture 08-02-2021 0 6	0	6
How hot bucket timespan is set ? Hi Splunkers, While splunking on bucket statistics - I've noticed that despite the fact of default 90 days set for ma... by data_beast Explorer in Deployment Architecture 08-02-2021 0 0	0	0