Deployment Architecture

Community Activity

Send data to 2 indexers Hello everyoneI need help to send information to 2 indexers.By request of the client I need to send information from ... by edgarsilva01 Path Finder in Deployment Architecture 01-19-2021 0 2	0	2
Splunk Cloud - Heavy Forwarders : Not Sending logs Hello there,Is there any way to either configure an alert when the heavy forwarders are not sending logs in splunk cl... by sting663 New Member in Deployment Architecture 01-18-2021 0 1	0	1
How to reset the _TCP_ROUTING dest key Please assume the below in transforms.conf[send_rawevents] REGEX = . DEST_KEY = _TCP_ROUTING FORMAT = indexer1 [send... by efika Communicator in Deployment Architecture 01-18-2021 0 0	0	0
Search on most recent data has completed. Expect slower search speeds as we search the reduced bucket What's the meaning of this warning message?I didn't enable index reduction at all."Search on most recent data has com... by phil_wong Explorer in Deployment Architecture 01-17-2021 0 3	0	3
Error while adding search head member Anybody have faced this issue?$ /opt/splunk/bin/splunk add shcluster-memberDeserialization failed. Could not find exp... by bhupalbobbadi Path Finder in Deployment Architecture 01-17-2021 0 1	0	1
OS upgrade Hi All , We have 1 indexer, 1 SH and 1 DS . We are planning for an OS upgrade (OS RHEL 6 to OL 7) .All the these de... by rahulhari88 Explorer in Deployment Architecture 01-15-2021 0 1	0	1
Failed to contact license master: reason='WARN: path=/masterlm/usage: invalid signature on request from ip=xx.xx.x.xxx' We are having an issue with our Splunk installation not being able to run any searches on our Test environment. We s... by cirkit1 Explorer in Deployment Architecture 01-15-2021 0 3	0	3
SF and RF never met while adding an indexer to multi-site cluster We migrate single site to multisite cluster by following the document: https://docs.splunk.com/Documentation/Splunk/l... by mchang_splunk Splunk Employee in Deployment Architecture 01-15-2021 0 2	0	2
Removal of Deployment Server Good Morning,I wanted to ask about something I have read somewhere, but not entirely sure. I am a beginner in Splunk ... by rafaelruales Explorer in Deployment Architecture 01-14-2021 0 3	0	3
MaxMind Database Update does not affect searches results Hello, I'm having an issue with maxming GeoLite database update. Even I'm updating the database on Splunk the Count... by lenorxav Explorer in Deployment Architecture 01-14-2021 0 4	0	4
Deployment server and cluster master on same machine from Splunk 7 to Splunk 8 Hello,our architecture in production was created years ago, we have Deployment Server and Cluster Master on same mach... by splunkreal Influencer in Deployment Architecture 01-13-2021 0 4	0	4
Search Head Captain Replication Issues Seeing an issue in our environment - we have a search head cluster and the captain throws the following error message... by Thighcep Loves-to-Learn Lots in Deployment Architecture 01-13-2021 0 0	0	0
S3 compatibility tests failed with MinIO I have tested the S3 compatibility of MinIO with the tool(https://github.com/splunk/s3-tests). Some of the tests fail... by marcelb New Member in Deployment Architecture 01-13-2021 0 0	0	0
How can i integrate IIS logs to splunk How can i integrate my windows web server IIS logs to splunk. I am planning to setup lab for splunk by using windows ... by csahu Observer in Deployment Architecture 01-10-2021 0 1	0	1
Apps pushed thro deployment server not with root user i have newly installed UF on the linux machine and splunk user/groups created.afterwards pushed apps from the deploym... by DataOrg Builder in Deployment Architecture 01-08-2021 0 3	0	3
Can Splunk Web be Hosted on its own Server? Can Splunk Web in a Splunk Enterprise solution be hosted on a server other than the Splunk Search Head? We are curren... by Ed11375 Explorer in Deployment Architecture 01-08-2021 0 2	0	2
Permissions for apps and .conf files Hello I created an app, and now I am trying to figure out the permissions it needs because it is getting deployed o... by splunktrainingu Communicator in Deployment Architecture 01-07-2021 0 2	0	2
Splunk High Availability setup Hi SPlunkers,Currently we have a single instance deployment i.e. we have a splunk enterprise console which has both i... by SS1 Path Finder in Deployment Architecture 01-07-2021 0 1	0	1
Does splunk support running a standalone search head next to a search head cluster? While reading the guide for upgrading stand alone search heads to a cluster, I noticed that you cannot add an existin... by chustar Path Finder in Deployment Architecture 01-06-2021 1 2	1	2
What are some cool things you've implemented in your Splunk environment? This is information I'm always curious to know about other people's environments/setups. Is there anything you're p... by aberkow Builder in Deployment Architecture 01-06-2021 1 2	1	2
Upgrade server operating system with splunk enterprise install Hello everyone, I would like to upgrade the OS of the Splunk architecture.Currently we have the architecture on Windo... by gl_splunkuser Path Finder in Deployment Architecture 01-05-2021 0 3	0	3
Restart activity All Splunk Apps are installed on Linux Servers and we will apply OS patch.And i have 3 Indexers, 4 Search Heads, 1 De... by saeed Explorer in Deployment Architecture 01-03-2021 0 2	0	2
Can I configure apps to only use specific index clusters when search heads are connected to multiple clusters? So I am in somewhat of a fun situation where we have multiple instances of Splunk installed each with their own index... by ngablern New Member in Deployment Architecture 12-30-2020 0 3	0	3
Single Splunk Instance / No Forwarders Greetings, Within my infrastructure, I am hoping to setup a single Splunk instance to ingest uploaded logs for analys... by lschifano Engager in Deployment Architecture 12-28-2020 0 3	0	3
Cluster Errors: streamfwd.exe ResolveLocaleName could not be located in the dynamic link library KERNEL32.d Hi,Has anyone ran into this issue before? I tried finding other Splunk questions on this and I couldn't find anything... by Kfesliyan Loves-to-Learn Everything in Deployment Architecture 12-28-2020 0 0	0	0