Deployment Architecture

Community Activity

csv file not uploading I am new to Splunk and am trying to learn via online tutorial.I cannot get the provided csv file to upload correctly.... by dcali New Member in Deployment Architecture 07-28-2020 0 1	0	1
Which tools/methods are considered the best for orchestrated deployment of universal forwarder installations? We have Chef in our environment, as well as a Deployment Server. Is there any guide out there on how to deploy UF’s a... by adnankhan5133 Communicator in Deployment Architecture 07-24-2020 0 1	0	1
Run Splunk as non-root user I've been working on remediating this vulnerability https://www.splunk.com/view/SP-CAAAP3M "Potential Local Privilege... by mikefg Communicator in Deployment Architecture 07-23-2020 0 7	0	7
Restore frozen data Hello,I have this INFO message:INFO BucketMover - will attempt to freeze bkt="/opt/splunk/var/lib/splunk/idx/db/rb_15... by TISKAR Builder in Deployment Architecture 07-23-2020 0 1	0	1
Is it possible to roll data from warm to cold with a time parameter? Otherwise there might be a GDPR Problem Is there a way to roll data from warm to cold with a time parameter? I searched and i didn't find a way. There is onl... by Dennis54321 Engager in Deployment Architecture 07-23-2020 3 1	3	1
How to change tcp input queue size? Hi,Does anyone know how to change tcp input queue size? I know other queues such as indexQ, parsingQ, aggQ, are chang... by brandy81 Path Finder in Deployment Architecture 07-22-2020 0 1	0	1
Universal forwarder through a TLS load balancer and no client certificate Hi,I've got a setup where my universal forwarder clients are going to submit logs to a Splunk index instance going th... by gc_os76 Explorer in Deployment Architecture 07-22-2020 0 5	0	5
Splunk Apps and distributed deployments I'm trying to figure out where the app content is served from in a distributed deployment. For example, is the entire... by camillak Path Finder in Deployment Architecture 07-21-2020 0 2	0	2
why collect command not working ?? Hello everyone I have a SH and two IDX I run a search in SH and using "collect" command i push the results to a ind... by ramarcsight Explorer in Deployment Architecture 07-21-2020 0 18	0	18
Dose Universal forwarder do line breaking? Hi As I see many documents and comments here, Universal forwarder do not break line. with "LINE_BREAKER" in props.con... by brandy81 Path Finder in Deployment Architecture 07-20-2020 0 3	0	3
licensing Hi,Searching: When a host reaches 1gb memory consumed per day fire an alert?This will has to be real-time. by dani9 Explorer in Deployment Architecture 07-20-2020 0 1	0	1
Splunk Failover Capabilities - DNS We have a multi-site (Production - Site 1, DR - Site 2) Enterprise Security deployment with clustered indexing. Searc... by adnankhan5133 Communicator in Deployment Architecture 07-19-2020 0 2	0	2
Any IOPS recommendations for cold bucket block volume? Looking for cheap storage. The volume where the hot/warm data resides shall be running on a disk with at least 1200 IOPS, since Splunk Enterpris... by adnankhan5133 Communicator in Deployment Architecture 07-17-2020 0 1	0	1
FILTERING Hi,I have 2 sources log so much like 2 gb per day just them.What could I do to limit it? Is possible to set some filt... by dani9 Explorer in Deployment Architecture 07-17-2020 0 3	0	3
license Questions:1) How much does a license from 5gb per day cost? 2) Where could that be bought?2) When license overcomes l... by dani9 Explorer in Deployment Architecture 07-17-2020 0 1	0	1
Is there a way to catch error from the Splunk cmd window when trying to backup kvstore from batch file in windows? Hello Experts. I'm trying to backup our kvstores with the well documented backup command in a windows batch file. I t... by paulito123 Explorer in Deployment Architecture 07-16-2020 0 0	0	0
Understanding the hierarchy of configuration files. Good afternoon, I'm a regular reader, but this is my first time writing, so I'll introduce myself. I'm Luis and work ... by Luis_Torres Loves-to-Learn Lots in Deployment Architecture 07-15-2020 0 2	0	2
How to correctly monitoring a .csv in the Heavy Forwarder instance? HelloCan someone recommend me the necessary steps to be able to correctly monitoring a .csv in the Heavy Forwarder in... by Luis_Torres Loves-to-Learn Lots in Deployment Architecture 07-15-2020 0 3	0	3
ndex clustering question (troubleshooting sbux)..Missing={ default:1 } One of our indexer cluster crashes and CM is showing many messages like Missing enough suitable candidates to creat... by sat94541 Communicator in Deployment Architecture 07-14-2020 1 2	1	2
Distributed Monitoring Console "Apply Changes" is not taking effect Hi There,After making changes such as editing server roles, adding search peers in Distributed Monitoring console I a... by Manjushree New Member in Deployment Architecture 07-14-2020 0 3	0	3
Not able to create new index in standalone instance of Splunk indexer Hi All, I've created new app with all the indexes required and have added all the stanzas for parameters.Restarted th... by rupeshn Explorer in Deployment Architecture 07-13-2020 0 2	0	2
Datamodel acceleration storage calculation Hi,Based on the Splunk documentation to calculate the storage for accelerated data for a year isAccelerated data mode... by ajaykumar03 New Member in Deployment Architecture 07-13-2020 0 1	0	1
I have a Splunk Enterprise Search Head in a Production and a second one in a Non-Prod environment. Any best practices fo The search head in the Non-Prod environment will not be active and would only be turned on in the event of a disaster... by adnankhan5133 Communicator in Deployment Architecture 07-09-2020 0 3	0	3
Need a help to setup distributed monitoring console Hi All,We are planning to build on separate Linux server for DMC and we have below components.Search Head cluster - 2... by santhanam95 Observer in Deployment Architecture 07-09-2020 0 2	0	2
Rawdata contains non-compressed file Due to migration from a stand-alone indexer (on Windows) to three-node indexer cluster (CentOS), we are doing a test ... by MaverickT Communicator in Deployment Architecture 07-09-2020 0 2	0	2