Deployment Architecture

Community Activity

Doubt in indexer clustering HiI have a 2 site architectureSite 1 - 2 indexers, 2 ES SHSite 2 - 2 indexers, 1ES SHAll of them are in clusters.I wi... by rahulhari88 Explorer in Deployment Architecture 04-22-2025 0 6	0	6
System not hashing sslPassword server.conf Hello All I am creating an app that will have all the SSL certs and pem files in it. As part of the app I have the ... by edwardrose Contributor in Deployment Architecture 04-17-2025 0 4	0	4
Mutlisite SHC Hi I have a following architecture and i am trying to setup my Search head cluster .i have multiple questions , if i ... by rahulhari88 Explorer in Deployment Architecture 04-16-2025 0 14	0	14
Recommended Deployment Server Size Hello Guys,I have an existing deployment server and I'm reviewing the average network bandwidth of the server. That c... by whitefang1726 Path Finder in Deployment Architecture 04-10-2025 0 6	0	6
CM redundancy and cluster/manager/ha_active_status response Hello,we're implementing a distributed clustered infrastructure with CM redundancy, between the indexers/search heads... by llopreiato Explorer in Deployment Architecture 04-07-2025 0 6	0	6
Why is the KV Store status is showing as "starting" in Search Head Cluster? We created a KV Store in a search head in clustered architecture, by adding the files collections.conf and transforma... by TGanga Explorer in Deployment Architecture 04-06-2025 2 12	2	12
Newbie question: How to/Should I set up a deployment server in the docker compose trial Hi, we just started testing/experimenting with Splunk.Followed a Splunk4Rookies workshop but that focussed on the SPL... by ccecvb Engager in Deployment Architecture 04-06-2025 0 4	0	4
query to check fixup , SF, RF and data is searchable in splunk Is there is any query to check like if there is any fixup pending and also it shows SF , RF and data is searchable i... by Praz_123 Communicator in Deployment Architecture 04-03-2025 0 3	0	3
Splunkforwarder 9:.3 failing in docker desktop We are trying to run the splunk forwarder local to fix few vulnerabilities and getting the following error message an... by bhupalbobbadi Path Finder in Deployment Architecture 04-03-2025 0 1	0	1
Can't see the 'Install app from file' option (on search head cluster) After downloading an app from splunkbase, I got the following page - On the server, after clicking Mange Apps, I see... by ddrillic Ultra Champion in Deployment Architecture 04-02-2025 0 8	0	8
Can I integrate my ServiceNow instance with my Splunk dev environment? I have ServiceNow developer instance. Can I integrate with my Splunk dev environment. The Splunk Add on I am try in... by abi2023 Path Finder in Deployment Architecture 03-31-2025 0 8	0	8
Deployment app on multiple serverclass I wanted to add same base configuration for workstations and have serverclasses divided by organizations but base app... by nieminej Loves-to-Learn Lots in Deployment Architecture 03-27-2025 0 5	0	5
Deployment Server Uninstalling App from UF We have clustered Deployment Servers (with NFS shared drive) because we have total of clients tens of thousands at th... by nieminej Loves-to-Learn Lots in Deployment Architecture 03-26-2025 0 3	0	3
Collect SunOS-SPARC Logs Hello Splunkers!I am looking for a way to collect the SunOS-SPARC OS logs. After some research, I have tried to updat... by dania_abujuma Explorer in Deployment Architecture 03-26-2025 0 2	0	2
Splunk icons for deployment document Where can I find the icons that I can use for a splunk architecture diagram? by ayomotukoya Explorer in Deployment Architecture 03-24-2025 0 3	0	3
How to handle homePath, coldPath and thawedPath on a single disc (mount) best praxis Without a tiered storage model it seems like there would be little argument for using cold/frozen storage. Except pot... by fatsug Builder in Deployment Architecture 03-24-2025 0 7	0	7
Why are not all indexes searchable when i have 1 broken indexer out of 2? I have 2 indexers in a cluster. One is down and one is up. All buckets are there on the indexer that is up but still ... by Gryphus Observer in Deployment Architecture 03-20-2025 0 6	0	6
Presenting Splunk Large-Scale Design with Mermaid / Draw.io or similar products hi Folks,I’m preparing to present a large-scale Splunk design to stakeholders and want to make it interactive. To ach... by koshyk Super Champion in Deployment Architecture 03-20-2025 0 4	0	4
Re-add search head. I tried to run ./splunk remove shcluster-member -mgmt_uri https://<CAPTAIN_IP>:8089 on the non-captain search head, w... by siemsplunk Explorer in Deployment Architecture 03-15-2025 0 6	0	6
Splunk 9.3 - WebUI module won't restart or start. I've had a working Splunk instance for a month, but post patch it refuses to start the webUI.Where I would either sta... by andy_itperson New Member in Deployment Architecture 03-14-2025 0 2	0	2
Timestamp ahead of _time We have a discrepancy of 30 to 40 seconds between the event timestamp and _time. I have tries changing the config on ... by alec_stan Explorer in Deployment Architecture 03-13-2025 0 5	0	5
Upgraded Heavy fowarder wihout data loss I'm planning to upgrade upgrade splunk environment now.3 shcluster - 3 index cluster - 2 heavy forwarder - 1 master. ... by blanky Explorer in Deployment Architecture 03-13-2025 0 5	0	5
ERROR TcpOutputFd [ TcpOutEloop] - Expecting to be in eWaitCapabilityResponse, found itself in SendCapability HelloUsing Splunk 9.3.2What does this error mean ?ERROR TcpOutputFd [ TcpOutEloop] - Expecting to be in eWaitCapabili... by lar06 Explorer in Deployment Architecture 03-12-2025 0 3	0	3
Patch Automation Teamam looking for some suggestions or insights Patch Automation through Ansible , Terraform by rksharma2808 Loves-to-Learn in Deployment Architecture 03-11-2025 0 1	0	1
Splunk Smartstore to on-prem S3 then tier to public cloud Hi all,My customer would like to use Smartstore with on prem S3 storage(Storagegrid) and then tier the older data(aft... by cfrank Engager in Deployment Architecture 03-11-2025 0 2	0	2