Deployment Architecture

Community Activity

Failed to contact the master. ERROR: from search head member Hello to everyone,We had to change IP to our entire cluster, after the changes one SH member is not able to communica... by gmathiou4 Engager in Deployment Architecture 08-07-2020 0 0	0	0
How to identify a list of forwarders sending data to a single Splunk indexer? Hi all, I have been trying to identify a list of the current forwarders that are sending data to our single Splunk in... by Splunker4Life Explorer in Deployment Architecture 08-06-2020 2 18	2	18
How to migrate an existing app/dashboard in an old instance of Splunk Enterprise to a new instance in Splunk Cloud? Please help me with the steps that need to be taken during this process. by Roy_9 Motivator in Deployment Architecture 08-06-2020 0 4	0	4
AWS Smartstore Architecture - i3 Hello community!I am looking at various configurations options for AWS BYOL running ES. We'll be leveraging SmartSto... by johnansett Communicator in Deployment Architecture 08-04-2020 0 1	0	1
Create Splunk Alert for fortinet VPN tunnel status Hi fellow Splunkers,I want to create alert with these conditions:alert triggered when any of the VPNs go down.alert t... by mufthmu Path Finder in Deployment Architecture 08-04-2020 0 3	0	3
VersionControl for Splunk - Disaster Recovery Strategy for Splunk KO's and conf files Does anyone have any experience with the VersionControl for Splunk App? Planning to use this for backup/restore of Sp... by adnankhan5133 Communicator in Deployment Architecture 07-30-2020 0 1	0	1
How to migrate Splunk Heavy Forwarder to a new server? Hi all, how to migrate Splunk Heavy Forwarder to a new server? Thanks. by lucas4394 Path Finder in Deployment Architecture 07-30-2020 0 7	0	7
Splunk search on SH return: Unknown error for indexers Searches return errors like below. The indexers IPs returned seems to be changing on different attempts of the same s... by jpillai Path Finder in Deployment Architecture 07-30-2020 0 0	0	0
How to connect a clustered indexer deployment to the License Master of a non-clustered deployment? I have a non-clustered splunk enterprise deployment (1) , where 1 of the 3 indexers is the License Master.I have anot... by Glasses Builder in Deployment Architecture 07-30-2020 0 6	0	6
Help with changing IP address on one of the Search Heads in Cluster Due to infrastructure issues, I need to make a change to the IP address to one of my Search Heads (one of the Search ... by Crashfry Path Finder in Deployment Architecture 07-30-2020 0 4	0	4
Need some assistance with backup and restoring Splunk conf files and knowledge objects. I noticed several Splunkbase that can facilitate the backup and restore process, such as the following.Git Version Co... by adnankhan5133 Communicator in Deployment Architecture 07-28-2020 0 2	0	2
what is data in /opt/splunk/var/lib/splunk/msad/datamodel_summary Hi everyone, "/opt/splunk/var/lib/splunk/msad/datamodel_summary/ " is taking up the most space on the root volum... by aasabei Loves-to-Learn Lots in Deployment Architecture 07-28-2020 0 1	0	1
How to forward Solaris audit logs I have installed the Universal Forwarder on my Solaris Global server, but no data is getting to my Indexer. Looking ... by Roy New Member in Deployment Architecture 07-28-2020 0 3	0	3
Tcpinput whit tokens: how to specify the destination index? Hi all,I'm trying to configure a tcpinput endpoint configuration in a way which makes me able to route incoming traff... by gc_os76 Explorer in Deployment Architecture 07-28-2020 0 1	0	1
deployment server affecting apps not defined on it? I have a deployment server, and I get that apps defined in the serverclass.conf will be removed or deployed based on ... by igne Observer in Deployment Architecture 07-28-2020 0 4	0	4
Why is cluster master reporting "Cannot fix search count as the bucket hasn't rolled yet.", preventing me from meeting my Search Factor? My cluster master is currently reporting there are 18 fixup tasks pending which is preventing me from meeting my Sear... by LiquidTension Path Finder in Deployment Architecture 07-28-2020 6 16	6	16
csv file not uploading I am new to Splunk and am trying to learn via online tutorial.I cannot get the provided csv file to upload correctly.... by dcali New Member in Deployment Architecture 07-28-2020 0 1	0	1
Which tools/methods are considered the best for orchestrated deployment of universal forwarder installations? We have Chef in our environment, as well as a Deployment Server. Is there any guide out there on how to deploy UF’s a... by adnankhan5133 Communicator in Deployment Architecture 07-24-2020 0 1	0	1
Run Splunk as non-root user I've been working on remediating this vulnerability https://www.splunk.com/view/SP-CAAAP3M "Potential Local Privilege... by mikefg Communicator in Deployment Architecture 07-23-2020 0 7	0	7
Restore frozen data Hello,I have this INFO message:INFO BucketMover - will attempt to freeze bkt="/opt/splunk/var/lib/splunk/idx/db/rb_15... by TISKAR Builder in Deployment Architecture 07-23-2020 0 1	0	1
Is it possible to roll data from warm to cold with a time parameter? Otherwise there might be a GDPR Problem Is there a way to roll data from warm to cold with a time parameter? I searched and i didn't find a way. There is onl... by Dennis54321 Engager in Deployment Architecture 07-23-2020 3 1	3	1
How to change tcp input queue size? Hi,Does anyone know how to change tcp input queue size? I know other queues such as indexQ, parsingQ, aggQ, are chang... by brandy81 Path Finder in Deployment Architecture 07-22-2020 0 1	0	1
Universal forwarder through a TLS load balancer and no client certificate Hi,I've got a setup where my universal forwarder clients are going to submit logs to a Splunk index instance going th... by gc_os76 Explorer in Deployment Architecture 07-22-2020 0 5	0	5
Splunk Apps and distributed deployments I'm trying to figure out where the app content is served from in a distributed deployment. For example, is the entire... by camillak Path Finder in Deployment Architecture 07-21-2020 0 2	0	2
why collect command not working ?? Hello everyone I have a SH and two IDX I run a search in SH and using "collect" command i push the results to a ind... by ramarcsight Explorer in Deployment Architecture 07-21-2020 0 18	0	18