Deployment Architecture

Discussions

Thread Info

Splunk deployment

My splunk web service is cannot recognize my source type in props.conf file when I try to add data. Here is my props....

by Engager in

Splunk Self-signed Certificate Error. Error setting up SSL for TCP data input from file=inputs.conf stanza="SSL"

Hello. Im new at Splunk. Recently, I am trying to create and sign my own TLS certificates, following this official gu...

by Explorer in

Search Peer down, distsearch.conf

If I have 6 search peers configured in the distsearch.conf file but 3 of them go down, can Splunk recognize that a ho...

by Explorer in

Enable Deployment and HEC tokens in Global settings

We are generating HEC tokens on a deployment server and pushing them out to the HECs. HEC tokens are disabled by d...

by Explorer in

List deployment client showing "no clients contacted the server"

Hi,I have set up deployment server. When I checked splunkd_access.log , it shows successful phonehome connection from...

by Path Finder in

Compatibility

Hello, Does Splunk 9.0 compatible with Oracle Linux?

by Engager in

Search Heads and Search Peers configuration

Currently working on deploying Splunk on AWS to work in conjunction with our current on-prem solution and I have 2 qu...

by Explorer in

search header cluster

I deployed the search header cluster and also deployed the indexer cluster, and merged the search header cluster and ...

by Loves-to-Learn Lots in

Unable to upload splunk app to splunk cloud

I have created a .tar.gz file using splunk tools and I am unable to upload the app, there is no error but the file af...

by Engager in

Splunk Smart Store is available for on prem implementation?

Hi, For the migration of data we need to use Smart Store from splunk Please help us to understand the below point...

by Observer in

Changing peer IP address ?

Hello, I've got a cluster with 2 peers, 1 seach head and 1 CM. All of them with a single network. Due to network ...

by Explorer in

Deployment Clients not showing in Monitoring Console?

Our Splunk instance is currently setup as a deployment server.All our clients have the Universal Forwarder installed ...

by Loves-to-Learn Everything in

Lost events on HF HEC

Hello Team, Deployment with: - HF with ACK when sending to Indexer - HEC on HF with ACK - application sending...

by Explorer in

Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times.

Probably the wrong board, choices were limited.In our dev environment we have a 3 node sh cluster, a 3 node idx clust...

by Path Finder in

Forwarder version 6.6.3 compatibilty with Indexer version 9.2

Hello, I need to upgrade the Splunk indexer version to version 9.2 But, we have a few instances which have Splunk...

by Loves-to-Learn in

Splunk package error

Whenever I package the splunk app, I get execute permission error because I have 744 permission for conf files but sp...

by Engager in

multi-site

we plan to have a multi-site clustering setup in HQ and DR so the question is can i configure the indexers located at...

by Path Finder in

cpu usages

hi guys i want ask some of the value in "main" Tables, actually i'm tried to figure out for a some CPU Memory form...

by Engager in

range() function

I want to search for an Account_Name that has the maximum number of login attempts within a span of 10 minutes with r...

by New Member in

App/Add-on

I have an architecture with a single SH and two indexers. I've installed the Splunk for Microsoft 365 add-on on the s...

by Path Finder in

whitelisted to receive configuration from Splunk Deployment Server

How to check if the host has been correctly whitelisted to receive configuration from Splunk Deployment Server?

by Loves-to-Learn in

How to delete app from splunk search head?

I tried to remove the threatq application files from /etc/apps inside the search head but every time I remove them,...

by Loves-to-Learn Everything in

Deployment Server and HeavyForwarder app local folder

Hello, if we have on DS "app/local" with conf files, is that possible restarting it that it pushes DS "app/local" t...

by Motivator in

Index rolling off data before retention age

Hello guys.... I have this task to investigate why indexes roll of data before retention age. From my findings, it sh...

by Explorer in

Having errors as a beginner

Greetings, I have just started using splunk and I was trying to montior logs from my files section, And I am getting ...

by Observer in

Get Updates on the Splunk Community!

Deployment Architecture

Discussions

Splunk deployment

Splunk Self-signed Certificate Error. Error setting up SSL for TCP data input from file=inputs.conf stanza="SSL"

Search Peer down, distsearch.conf

Enable Deployment and HEC tokens in Global settings

List deployment client showing "no clients contacted the server"

Compatibility

Search Heads and Search Peers configuration

search header cluster

Unable to upload splunk app to splunk cloud

Splunk Smart Store is available for on prem implementation?

Changing peer IP address ?

Deployment Clients not showing in Monitoring Console?

Lost events on HF HEC

Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times.

Forwarder version 6.6.3 compatibilty with Indexer version 9.2

Splunk package error

multi-site

cpu usages

range() function

App/Add-on

whitelisted to receive configuration from Splunk Deployment Server

How to delete app from splunk search head?

Deployment Server and HeavyForwarder app local folder

Index rolling off data before retention age

Having errors as a beginner

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

Transform your security operations with Splunk Enterprise Security

Splunk Admins and App Developers | Earn a $35 gift card!

How to install Splunk UF to AIX ?

Splunk Intermediate Forwarder Setup

CMMC Version 2.0

Stream forwarder only works when running as root

Search Cluster Overwriting etc/system/local/inputs...