Deployment Architecture

Community Activity

Use of FLASH SAN vs SSD I have a situation with Splunk and how things are configured. We have multiple indexers and they have local SSD drive... by flyingbeefhead New Member in Deployment Architecture 11-08-2020 0 0	0	0
Can you use the search head deployer as a deployment server I know that if I want to deploy apps to the search heads I should use the search head deployer functionality. My ques... by dstuder Communicator in Deployment Architecture 11-06-2020 1 1	1	1
How to ingest data from a different organizational network? We are currently working on an engagement for a Fortune 500 company which has multiple projects being run by differen... by adnankhan5133 Communicator in Deployment Architecture 11-06-2020 0 2	0	2
deploying splunk multisite cluster with 1 indexer per site hiI wanna deploy multisite cluster with 2 sites, 1 in-branch and another in a datacenter, I have 1 indexer for each s... by vitojij183 Explorer in Deployment Architecture 11-05-2020 0 5	0	5
How to prevent users taking clones of knowledge objects? Hi,I am dealing with a situation where many users in Production are taking clones of knowledge objects e.g. scheduled... by mbasharat Builder in Deployment Architecture 11-04-2020 0 2	0	2
Universal Forwarder Connectivity to indexer How do I check if a device has universal forwarder installed and if so how do I troubleshoot while it's not sending d... by waJesu Path Finder in Deployment Architecture 11-04-2020 0 1	0	1
Splunk IPv4 to IPv6 conversion Hi,I need help converting my splunk IPV4 to Ipv6. The questions have are:1.What changes need to be made to each serve... by Ephrem32 Explorer in Deployment Architecture 11-04-2020 1 7	1	7
Search Head version to Index Cluster version I have an Index Cluster that is running 7.2.4.2 version, if I have a Search Head that is running 7.3.0 version will i... by jeffbat Path Finder in Deployment Architecture 11-03-2020 0 1	0	1
How to Move manually buckets from hot to cold we set the buckets to roll from hot into cold for 90 days, but for some reason is not doing it and we are running low... by ajromero Path Finder in Deployment Architecture 11-03-2020 0 1	0	1
Deployment Server Deep Dive Documentation I'm looking to find information about the Splunk Deployment Server beyond the stuff found here:https://docs.splunk.co... by chris94089 Path Finder in Deployment Architecture 11-02-2020 0 2	0	2
Heavy forwarder without indexing So we have a client who has a splunk deployment already. They are not for using the universal forwarder to send us ce... by troyfred Explorer in Deployment Architecture 11-01-2020 0 1	0	1
Can i use events matched progress instead of "waiting for data" ? In search mode, there is a progression object in the top left corner that shows: "#number of 24,040 events matched"... by timgren Path Finder in Deployment Architecture 11-01-2020 1 3	1	3
splunk cloud Hello all,My organization is using splunk cloud. I log into splunk cloud to run searches and also access the enterpr... by trojan_81 Path Finder in Deployment Architecture 10-31-2020 1 3	1	3
Microsoft o365 app for splunk Folks,I would like to know what name of index you recommend for o365 audit logs via the Microsoft o365 add-on for spl... by trojan_81 Path Finder in Deployment Architecture 10-31-2020 1 2	1	2
Compatibility between search head in splunkcloud and on-prem search head Hello All,Our SH in Splunk cloud will be upgraded to 7.2.10.2 from v7.0.13. Our on - prem SH is on 7.0.5.As per the d... by km1986 Path Finder in Deployment Architecture 10-30-2020 0 1	0	1
[Smartstore] Is there a way to manually upload the bucket to smartstore. We notice that due to some reason some of the buckets never got loaded to the remote store. IS it feasible to upload ... by rbal_splunk Splunk Employee in Deployment Architecture 10-29-2020 0 2	0	2
Using Heavy Forwarder as a Relay I've seen the warnings of having UFs sending HFs and relaying to a index cluster. The objection seems to be around un... by dokaas_2 Communicator in Deployment Architecture 10-28-2020 0 1	0	1
Changing the IP of a SHC member Hi everyone, so one of our SHC member will be moved to another datacenter, as such the IP assigned will be different.... by d_lim Path Finder in Deployment Architecture 10-28-2020 1 0	1	0
Firehose to Splunk Cloud Has anybody implemented Firehose to Splunk cloud destination? Was wondering how the connection is made and if it can ... by bonf_bhai Loves-to-Learn in Deployment Architecture 10-27-2020 0 1	0	1
How to reduce the search factor to 2 from 3? Hello Splunkers,I have one requirement where have 3 sites and planning to keep the search factor to 2 and replication... by arunsunny Path Finder in Deployment Architecture 10-27-2020 1 5	1	5
Bucket corruption error Hi all,We have an environment with 3 IDX in cluster. One of them (splunk_idx1) fall and when it recovers, messages li... by pbalbasdtt Path Finder in Deployment Architecture 10-23-2020 2 1	2	1
Indexing Huawei Firewall device logs into Splunk Hi,I am trying to ingest huawei USG6650 device logs but it seems that no app is available in splunk base for this pur... by eidil Explorer in Deployment Architecture 10-23-2020 1 4	1	4
Can a Index Cluster master use it self for forwarding data to the Cluster peers? Hi All.I was thinking about the configuration af an Index Cluster Deployer (formerly known as Master), where best pra... by las Contributor in Deployment Architecture 10-23-2020 1 2	1	2
Forwarder Indexer Compatibility Is Universal Forwarder version 7.1.X compatible with that of Indexer version 8.0.X? by sanjubaba Path Finder in Deployment Architecture 10-22-2020 0 1	0	1
Is it possible to set site_search_factor = origin:1, site4:0, total:3 in a multisite indexer cluster to restrict searchable data being indexed to a specific site? Hi Team, I have a theoretical question about multisite indexer clustering. As site_replication_factor is how many... by hazclan13 Engager in Deployment Architecture 10-20-2020 0 5	0	5