Deployment Architecture

Community Activity

can we split a big shcluster to two small one? Now we have a big shcluster for many department users, for some reason, we must spilt a department for independent us... by liangliang Explorer in Deployment Architecture 05-20-2025 0 15	0	15
Discrepancies between DMC server view and actual server view I had a few questions over how the DMC gathered its information for server specifications and how to extract them. I ... by Abass42 Communicator in Deployment Architecture 05-20-2025 0 9	0	9
Can I add UBA servers as deployment server clients? Splunk PS installed UBA a while back, and I just noticed that we are not getting OS logs from those servers into Splu... by ilhwan Path Finder in Deployment Architecture 05-19-2025 0 3	0	3
Splunk 9.3+ Deployment on CIS Red Hat 9 level 1 image - No GUI Hey Splunk Community,I was wondering if anyone has figured out what is the cause for the GUI not to work at all in a ... by jwestbank Explorer in Deployment Architecture 05-19-2025 0 11	0	11
Suddenly, Splunk stops working Hi all, I have a Splunk server, that suddenly stops working, and i don't know why. I've added the 'Splunk enable bo... by rubeniturrieta Communicator in Deployment Architecture 05-16-2025 0 15	0	15
UF details not reflecting in deployment server Hello Team,I am configuring Splunk, but the UF (Universal Forwarder) details are not reflecting in the Deployment Ser... by abhi Observer in Deployment Architecture 05-16-2025 0 4	0	4
Connection problems with Universal Forwarder for Linux ARM and Splunk Cloud (SSL error) Hi everyone, I am currently trying to run the Universal Forwarder for Linux ARM on a Raspberry Pi 2 Model B with an ... by DanielaHerold New Member in Deployment Architecture 05-16-2025 0 12	0	12
Error while deploying apps to first member [Splunk Enterprise 8.2] Hi all,I am trying to deploy my apps from the deployment server with the command: /opt/splunk/bin/splunk apply shclus... by Ciccius Explorer in Deployment Architecture 05-16-2025 0 3	0	3
Cluster - Mix of RHEL 8 and RHEL 9 Problematic? I'm on the server / infrastructure team at my organization. There is a dedicated Splunk team, and they want to replac... by VeloPunk Engager in Deployment Architecture 05-09-2025 0 10	0	10
Require suggestion on UF upgradation and Required older versions of universal forwarder I have abunch of Splunk universal forwarder which runs on the version 6.6.3 - Linux machines. Im looking forward to u... by AsmaF2025 Explorer in Deployment Architecture 05-08-2025 0 8	0	8
Splunk indexes to external storage. Dear Splunk Community,I’m currently facing an urgent issue in my Splunk environment: my storage utilization has reach... by kn450 Explorer in Deployment Architecture 05-08-2025 0 4	0	4
Sizing new installation, calculate storage from events Hi, we are preparing to deploy splunk and I have a question about sizing. All the documentation I've found so far t... by reswob4 Builder in Deployment Architecture 05-04-2025 0 3	0	3
this license does not support being a remote master - dev license Hello, I am setting up a test instance to be a license master and trying to connect a second splunk install to point ... by dmcnulty Explorer in Deployment Architecture 04-30-2025 0 3	0	3
Resource estimation Hi everyone,We're planning a new Splunk deployment and considering three different scenarios (Plan A and B) based on ... by mahsa_nvd Loves-to-Learn Lots in Deployment Architecture 04-29-2025 0 1	0	1
Moving Indexers to a New Site with RF Adjustments Hi everyone,I have 3 indexers (in a cluster) located on Site A. The current replication factor (RF) is set to 3.I nee... by m_zandinia Path Finder in Deployment Architecture 04-26-2025 0 2	0	2
Step by Step to upgrade Splunk? Hi, we have Dev and Prod linux servers which contains Splunk agents. The infraestructure on Prod (V 8.2.2.1) contain... by mc_i02035 Observer in Deployment Architecture 04-25-2025 0 5	0	5
Does Splunk support both SSO and token authentication at the same time? Hello to the community,I try to query Splunk from an external SDK for which I am asking from our admins for a token... by LukasO New Member in Deployment Architecture 04-22-2025 0 3	0	3
Doubt in indexer clustering HiI have a 2 site architectureSite 1 - 2 indexers, 2 ES SHSite 2 - 2 indexers, 1ES SHAll of them are in clusters.I wi... by rahulhari88 Explorer in Deployment Architecture 04-22-2025 0 6	0	6
System not hashing sslPassword server.conf Hello All I am creating an app that will have all the SSL certs and pem files in it. As part of the app I have the ... by edwardrose Contributor in Deployment Architecture 04-17-2025 0 4	0	4
Mutlisite SHC Hi I have a following architecture and i am trying to setup my Search head cluster .i have multiple questions , if i ... by rahulhari88 Explorer in Deployment Architecture 04-16-2025 0 14	0	14
Recommended Deployment Server Size Hello Guys,I have an existing deployment server and I'm reviewing the average network bandwidth of the server. That c... by whitefang1726 Path Finder in Deployment Architecture 04-10-2025 0 6	0	6
CM redundancy and cluster/manager/ha_active_status response Hello,we're implementing a distributed clustered infrastructure with CM redundancy, between the indexers/search heads... by llopreiato Explorer in Deployment Architecture 04-07-2025 0 6	0	6
Why is the KV Store status is showing as "starting" in Search Head Cluster? We created a KV Store in a search head in clustered architecture, by adding the files collections.conf and transforma... by TGanga Explorer in Deployment Architecture 04-06-2025 2 12	2	12
Newbie question: How to/Should I set up a deployment server in the docker compose trial Hi, we just started testing/experimenting with Splunk.Followed a Splunk4Rookies workshop but that focussed on the SPL... by ccecvb Engager in Deployment Architecture 04-06-2025 0 4	0	4
query to check fixup , SF, RF and data is searchable in splunk Is there is any query to check like if there is any fixup pending and also it shows SF , RF and data is searchable i... by Praz_123 Communicator in Deployment Architecture 04-03-2025 0 3	0	3