Deployment Architecture

Community Activity

SHC New Member reverts to down after restart We are attempting to add three nodes to an existing SHC. We are able to add them, however they do not survive a resta... by jondukehds Explorer in Deployment Architecture 06-22-2020 0 2	0	2
ArtifactReplicator - Connection failed I see below error message in my search head cluster . Can some one please assist on this?06-18-2020 12:28:05.026 +010... by btshivanand Path Finder in Deployment Architecture 06-19-2020 0 4	0	4
What is the ideal DMC architecture for large environments? Hello all! I've inherited a large Splunk deployment and I've been given some leniency with setting up, or rather, rev... by milo Observer in Deployment Architecture 06-17-2020 0 4	0	4
Is there a trial version that allows API access? I am looking to create a proof-of-concept that intergrates splunk via API queries, however it appears the Splunk Ente... by nosaj0 New Member in Deployment Architecture 06-17-2020 0 1	0	1
Why is there high Mongod CPU usage on the search head? Hi, On my search head, Mongod is consuming most of my CPU usage: **115786 splunk 20 0 40.4g 10.6g 10.5g S ... by omprakash9998 Path Finder in Deployment Architecture 06-16-2020 1 6	1	6
Restore reduced buckets for a index in a cluster Hi everyone, I am following this Splunk doc regarding how to restore a reduce buckets: https://docs.splunk.com/Docume... by season88481 Contributor in Deployment Architecture 06-15-2020 0 1	0	1
AWS deployment requirements Hi guys,Looking to deploy Splunk on AWS and curious how it translates compared to physical servers. I have around 3TB... by mwdbhyat Builder in Deployment Architecture 06-15-2020 0 3	0	3
Uf + HF on on server Hi there,Currently running a UF + and HF on one box as well as it being a syslog collector. The HF needs to be there ... by mwdbhyat Builder in Deployment Architecture 06-14-2020 0 2	0	2
Buckets ending .rbsentinel in the clustered COLD directory of index and 0 size Hello guys,what are .rbsentinel files on clustered indexers?Could they conflict when thawing buckets if they have sam... by splunkreal Motivator in Deployment Architecture 06-12-2020 0 1	0	1
Configure Prometheus with Splunk Hi , I am a developer and looking to integrate my Prometheus with splunk Prometheus is up and running at my local (h... by ShubhneetChawla Explorer in Deployment Architecture 06-12-2020 1 4	1	4
Choosing "settings" - "indexer clustering" takes me to "Clustering: Search Head"; possible to fix? In our on-prem splunk cluster attempting to follow these steps in "Enable the peer nodes": Enable the peerTo enable ... by mitag Contributor in Deployment Architecture 06-10-2020 0 3	0	3
Load balancing intermediate forwarders We have intermediate forwarders that receive data from UFs and then forward it to our indexer cluster that consists o... by ialahdal Path Finder in Deployment Architecture 06-10-2020 1 5	1	5
Update Universal Forwarder How can I update 300 forwarders quickly?Is there any method? by edgarsilva01 Path Finder in Deployment Architecture 06-10-2020 1 6	1	6
Check Deployer and search head status in internal logs I am trying to monitor deployer and search head service status using _internal logs.Which fields should I consider to... by snigdhasaxena Communicator in Deployment Architecture 06-03-2020 0 3	0	3
Indexer Clustering - One Peer will be down for Server Battery Replacement Hi Splunkers, One of our Splunk Clustered Indexer (Physical Server) will go thru to a battery replacement that might ... by jaracan Communicator in Deployment Architecture 06-03-2020 0 3	0	3
How to install forwarders on MSSQL cluster/windows on Splunk Cloud? Could anyone please help me out with a detailed description of how to install forwarders on MSSQL Cluster/Windows?We ... by simranrathi123 Engager in Deployment Architecture 06-02-2020 0 2	0	2
Can Splunk Forwarders be set to restart after system reboot. If yes then what is the process for it? I want to setup my splunk forwarders on linux machines to restart automatically after the linux machines are rebooted... by prernaprakash New Member in Deployment Architecture 06-01-2020 0 2	0	2
Do we need to reload the deployment server before phonehoming takes place? Hello All, I have below questions on the reload command and phonehoming which I need to confirm:1. Both the deploy re... by abhi04 Communicator in Deployment Architecture 05-30-2020 0 4	0	4
Search Head Deployer error message Has anyone seen this error before? <?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="ERRO... by kmugglet Communicator in Deployment Architecture 05-29-2020 0 10	0	10
Splunk Search Head Integration with SAML Hi All, I have 4 SH cluster members for which i have to integrate SAML. Our AD team is asking the below information r... by keishamtcs Explorer in Deployment Architecture 05-29-2020 0 3	0	3
Error Message on indexer console I'm seeing the error below under messages in my Splunk enterprise console: Missing or malformed messages.conf stanza... by ngct2020 New Member in Deployment Architecture 05-28-2020 0 5	0	5
Splunk License Master Hi All, My Production License Master link directly it's open with out credentials and it's not showing the Account se... by vijareddy8067 New Member in Deployment Architecture 05-28-2020 0 0	0	0
Issues with search head cluster linked to two index clusters I have a Search Head Cluster able to query in two index cluster. It used to be linked to a single index cluster and I... by freaklin Path Finder in Deployment Architecture 05-26-2020 0 0	0	0
Possible combinations of Splunk Instances with different Roles Hi all, I'm often facing the question in which way Splunk Instances with different Roles can be combined - especially... by christian_l Path Finder in Deployment Architecture 05-26-2020 2 5	2	5
Why did our search head crash? and how can we prevent it? Our search head crashed, saying - -- Apr 23 09:00:35 kernel: Out of memory: Kill process 2137 (splunkd) score 162 or ... by danielbb Motivator in Deployment Architecture 05-25-2020 0 2	0	2