Deployment Architecture

Community Activity

	Monitoring Console(MC) and Clustered Indexers. MC is only seeing indexers on one site meanwhile cluster includes two sites Have a server that performs my indexer clustering where my 20 indexers(10 per site) check in. On my monitoring consol... by santorof Communicator in Deployment Architecture 02-03-2021 0 3	0	3
	Indexing issues Hi, In Splunk's internal log file I can see the log file was processed by Splunk to index, but when I am trying to se... by bsrikanthreddy5 Path Finder in Deployment Architecture 02-02-2021 0 2	0	2
	Distributed deployment and MC: Do I need to add SH if the SH is sending its data to IDX cluster? Hi community.Just preparing for my ARCH practical lab. I heard that it's mandatory to add to the MC the non clustered... by MLGSPLUNK Path Finder in Deployment Architecture 02-02-2021 0 2	0	2
	Ingest large number of csv files I have a backlog of huge number of .csv file skipped by the UF need to be ingested manually to back fill. What is the... by msplunk33 Path Finder in Deployment Architecture 01-31-2021 0 3	0	3
	How do I see what Splunk components are in my enviornment? Good Morning Everyone! I am trying to see what components are in my Splunk environment. I just inherited a system wi... by ochoa165 Explorer in Deployment Architecture 01-27-2021 0 2	0	2
	Best Practice when managing remote Heavy Forwarders / Deployment Servers What would be considered the Splunk best practice when managing multiple deployment servers in different locations th... by travislelledeep Explorer in Deployment Architecture 01-25-2021 0 3	0	3
	Search Head Cluster (SHC) memebers not recieving password from Deployer I have an add on installed in Deployer which has been configured with Credentials and is working fine. But when i se... by ravi Loves-to-Learn Lots in Deployment Architecture 01-21-2021 0 1	0	1
	UF parallelization for Splunk Cloud I'm looking for advice for avoiding the 'Funnel Effect' for a small number of intermediate Universal Forwarders to ab... by X_Kinkead Explorer in Deployment Architecture 01-21-2021 0 2	0	2
	Log Retention Period Change I want to set up the retention policy for our logs (18 months). I have edited the indexes.conf to specify frozenTimeP... by DawidM Explorer in Deployment Architecture 01-21-2021 0 5	0	5
	On a Splunk Enterprise deployer, how do I change the default time selection on a search head cluster? I have a Splunk instance that I'm using as a deployer called halfiron. I created user-prefs.conf in this directory. (... by halbeisendv Path Finder in Deployment Architecture 01-20-2021 0 11	0	11
	Turn non clustered indexers into clustered indexer Hi all,I have an architecture with a search head cluster (3 members) and and 2 indexers, that are not in cluster.Whic... by lucacaldiero Path Finder in Deployment Architecture 01-19-2021 0 2	0	2
	Send data to 2 indexers Hello everyoneI need help to send information to 2 indexers.By request of the client I need to send information from ... by edgarsilva01 Path Finder in Deployment Architecture 01-19-2021 0 2	0	2
	Splunk Cloud - Heavy Forwarders : Not Sending logs Hello there,Is there any way to either configure an alert when the heavy forwarders are not sending logs in splunk cl... by sting663 New Member in Deployment Architecture 01-18-2021 0 1	0	1
	How to reset the _TCP_ROUTING dest key Please assume the below in transforms.conf[send_rawevents] REGEX = . DEST_KEY = _TCP_ROUTING FORMAT = indexer1 [send... by efika Communicator in Deployment Architecture 01-18-2021 0 0	0	0
	Search on most recent data has completed. Expect slower search speeds as we search the reduced bucket What's the meaning of this warning message?I didn't enable index reduction at all."Search on most recent data has com... by phil_wong Explorer in Deployment Architecture 01-17-2021 0 3	0	3
	Error while adding search head member Anybody have faced this issue?$ /opt/splunk/bin/splunk add shcluster-memberDeserialization failed. Could not find exp... by bhupalbobbadi Path Finder in Deployment Architecture 01-17-2021 0 1	0	1
	OS upgrade Hi All , We have 1 indexer, 1 SH and 1 DS . We are planning for an OS upgrade (OS RHEL 6 to OL 7) .All the these de... by rahulhari88 Explorer in Deployment Architecture 01-15-2021 0 1	0	1
	Failed to contact license master: reason='WARN: path=/masterlm/usage: invalid signature on request from ip=xx.xx.x.xxx' We are having an issue with our Splunk installation not being able to run any searches on our Test environment. We s... by cirkit1 Explorer in Deployment Architecture 01-15-2021 0 3	0	3
	SF and RF never met while adding an indexer to multi-site cluster We migrate single site to multisite cluster by following the document: https://docs.splunk.com/Documentation/Splunk/l... by mchang_splunk Splunk Employee in Deployment Architecture 01-15-2021 0 2	0	2
	Removal of Deployment Server Good Morning,I wanted to ask about something I have read somewhere, but not entirely sure. I am a beginner in Splunk ... by rafaelruales Explorer in Deployment Architecture 01-14-2021 0 3	0	3
	MaxMind Database Update does not affect searches results Hello, I'm having an issue with maxming GeoLite database update. Even I'm updating the database on Splunk the Count... by lenorxav Explorer in Deployment Architecture 01-14-2021 0 4	0	4
	Deployment server and cluster master on same machine from Splunk 7 to Splunk 8 Hello,our architecture in production was created years ago, we have Deployment Server and Cluster Master on same mach... by splunkreal Influencer in Deployment Architecture 01-13-2021 0 4	0	4
	Search Head Captain Replication Issues Seeing an issue in our environment - we have a search head cluster and the captain throws the following error message... by Thighcep Loves-to-Learn Lots in Deployment Architecture 01-13-2021 0 0	0	0
	S3 compatibility tests failed with MinIO I have tested the S3 compatibility of MinIO with the tool(https://github.com/splunk/s3-tests). Some of the tests fail... by marcelb New Member in Deployment Architecture 01-13-2021 0 0	0	0
	How can i integrate IIS logs to splunk How can i integrate my windows web server IIS logs to splunk. I am planning to setup lab for splunk by using windows ... by csahu Observer in Deployment Architecture 01-10-2021 0 1	0	1