Deployment Architecture

Community Activity

While pushing the bundle from deployer to search heads, why am I getting the following "Error while fetching apps baseline on target" error? First time I have tried to push a configuration bundle from deployer to search heads by using the below command spl... by manikanthkoti Explorer in Deployment Architecture 12-22-2020 0 4	0	4
Index Cluster configuration suggestions Hi everyone,We are having trouble with index cluster stability and I was given these configuration changes to make to... by TJSplunker Engager in Deployment Architecture 12-22-2020 0 4	0	4
Best practices to create a search head cluster Hi all, So I was wondering as I was writing some docs today and playing around creating some clusters... I was always... by llacoste Path Finder in Deployment Architecture 12-19-2020 0 1	0	1
Heavy forwarder too much ram in cache Hello,we we have heavy forwarder that take too much Ram in cache. How to find which Splunk /functionnality/saved_se... by nicolsa Observer in Deployment Architecture 12-18-2020 0 0	0	0
Some of s3 compatibility tests failed I am trying to setup a s3 compatible object storage as Splunk remote store. Are these errors and failures matters? t... by yensf New Member in Deployment Architecture 12-18-2020 0 1	0	1
Heavy Forwarders Query I have found different articles that query and return information about universal forwarders. But I am trying to get ... by carlosvalcarcel New Member in Deployment Architecture 12-16-2020 0 2	0	2
about applying shcluster-bundle, fail with Error -"call not properly authenticated" Dear Guys, This is about applying shcluster-bundle, fail with Error splunk apply shcluster-bundle -target https:/... by ykwon7 Observer in Deployment Architecture 12-15-2020 0 3	0	3
Unable to apply search head cluster bundle, how to resolve error "Error while deploying apps to first member: Error while fetching apps baseline on target"? I am trying to push an app through my deployment server onto my 3 Search Heads. I unzipped the app into /opt/splunk/e... by sborys Explorer in Deployment Architecture 12-15-2020 3 4	3	4
Filter the data sent by savecsearch with action whebook Hello Splunker'sI programmed a saved search with a send webhook data action to send the result in json format. I noti... by TISKAR Builder in Deployment Architecture 12-14-2020 0 0	0	0
FortiGate Add-On for Splunk logs encrypted passwords? We are seeing logs like this that might contain a base64 encoded encrypted password and we would like to know if this... by guarisma Contributor in Deployment Architecture 12-11-2020 0 0	0	0
windows deployment server is not sending serverclass to linux deployment client why windows deployment server is not sending serverclass to linux deployment client? any idea if we need to make any ... by splunk_user_maj Loves-to-Learn Lots in Deployment Architecture 12-11-2020 0 1	0	1
Sufficiency of Hardware Specs at indexer layer Hello Splunkers,We may have around 400UFs forwarding 1GB of events each UF, with total estimated daily ingestion of 4... by hectorvp Communicator in Deployment Architecture 12-11-2020 0 1	0	1
Indexer on RAID 0 Hi Splunkers,Our customer is demanding to reduce cost on infra with storage aspects on indexers.Initially we had prov... by hectorvp Communicator in Deployment Architecture 12-10-2020 0 4	0	4
Take down a site temporarily in a Multisite Cluster We have a 2 site multisite cluster with the following cluster configuration.The cluster contains 30 indexers total, ... by supabuck Path Finder in Deployment Architecture 12-10-2020 1 0	1	0
Invoke Script in Splunk Is it possible to invoke powershell script in Splunk? by sanjubaba Path Finder in Deployment Architecture 12-09-2020 0 1	0	1
Is there a base_config available for SHC? Is there a base_config available for Search Head Clustering configuration? If no, file approach of deploying SHC is n... by ansif Motivator in Deployment Architecture 12-09-2020 1 1	1	1
edit server.conf on multiple servers I want to edit server.conf for around 600 servers, is there anyway we can edit them all at a time. by vpantangi Path Finder in Deployment Architecture 12-09-2020 0 7	0	7
Change eai:data of nav bar default.xml through REST / Setup Page Through /servicesNS/nobody/MYAPP/admin/nav/default I can access the navigation bar content of my app. I now want to b... by herbatology New Member in Deployment Architecture 12-09-2020 0 1	0	1
Splunk Universal Forwarder Problematic or Bugged Versions? Hello,I was wondering if Splunk had any 7.x Universal Forwarders that had known problems or bugs such as not sending ... by zekiramhi Path Finder in Deployment Architecture 12-08-2020 0 4	0	4
custom search Hi,I am trying to use the custom command to read the data from other database and return to Splunk as query results. ... by mahe90 Explorer in Deployment Architecture 12-08-2020 0 0	0	0
Roll warm to cold based on time I'm trying to configure my indexes.conf to roll all db files based on time. Hot -> Warm (1 day) -> Cold (2 weeks) -> ... by michaeler Communicator in Deployment Architecture 12-08-2020 0 0	0	0
Question on Small Enterprise Deployment Hi,I'm having to deploy Splunk for the very first time having never worked with it before and struggling to understan... by chubba Observer in Deployment Architecture 12-08-2020 0 1	0	1
What is the impact to expire my server.pem? What is the impact to expire my server.pem? Hi Splunk professional, I would like to know any impacts when the serve... by Shuhei052492 Path Finder in Deployment Architecture 12-08-2020 0 5	0	5
add field to Selected Fields permanently (bar on left side of search results) we are running splunk v6.6 , and i have tried just about every answer on these forums, but i can not get anything to ... by spunk311z Path Finder in Deployment Architecture 12-08-2020 0 4	0	4
Deployer Push Mode Default Question I inherited a Splunk deployment and I trying to understand the config I see and what is referenced in the docs. The ... by jeremiahmcclain New Member in Deployment Architecture 12-07-2020 0 1	0	1