Deployment Architecture

Community Activity

Distributed Monitoring Console "Apply Changes" is not taking effect Hi There,After making changes such as editing server roles, adding search peers in Distributed Monitoring console I a... by Manjushree New Member in Deployment Architecture 07-14-2020 0 3	0	3
Not able to create new index in standalone instance of Splunk indexer Hi All, I've created new app with all the indexes required and have added all the stanzas for parameters.Restarted th... by rupeshn Explorer in Deployment Architecture 07-13-2020 0 2	0	2
Datamodel acceleration storage calculation Hi,Based on the Splunk documentation to calculate the storage for accelerated data for a year isAccelerated data mode... by ajaykumar03 New Member in Deployment Architecture 07-13-2020 0 1	0	1
I have a Splunk Enterprise Search Head in a Production and a second one in a Non-Prod environment. Any best practices fo The search head in the Non-Prod environment will not be active and would only be turned on in the event of a disaster... by adnankhan5133 Communicator in Deployment Architecture 07-09-2020 0 3	0	3
Need a help to setup distributed monitoring console Hi All,We are planning to build on separate Linux server for DMC and we have below components.Search Head cluster - 2... by santhanam95 Observer in Deployment Architecture 07-09-2020 0 2	0	2
Rawdata contains non-compressed file Due to migration from a stand-alone indexer (on Windows) to three-node indexer cluster (CentOS), we are doing a test ... by MaverickT Communicator in Deployment Architecture 07-09-2020 0 2	0	2
Splunk shows cluster-status --verbose only shows 'main' index We have an indexer cluster with several custom indexes configured in the indexes.conf, however when we run: splunk ... by kutzi Path Finder in Deployment Architecture 07-08-2020 0 2	0	2
Splunk Architecture Guidance on colocation best practices for the Search Head Cluster Deployer. Hello,While this helpful Splunk document ( https://docs.splunk.com/Documentation/Splunk/8.0.4/Deploy/Manageyourdeploy... by adnankhan5133 Communicator in Deployment Architecture 07-07-2020 0 1	0	1
Clustered Index Backup and Restore Options in Oracle Cloud (OCI) We have clustered indexing as part of our Splunk architecture deployed on Oracle Cloud and trying to come up with a r... by adnankhan5133 Communicator in Deployment Architecture 07-06-2020 0 0	0	0
Strategies for moving indexes to new datacenter Are there any recommended strategies for moving the index data to a new data center? We're planning to build up a new... by kutzi Path Finder in Deployment Architecture 07-06-2020 0 9	0	9
Splunk Metrics via Splunk Add on for *nix So, we aren't in an environment where we can just deploy apps (a la collectd) but want to get metrics in from Linux b... by Tohrment Path Finder in Deployment Architecture 07-03-2020 2 10	2	10
Assets and Identity in Splunk Search Head Cluster Issue Hello All,In the SH members, we are receiving the following error, while this is not showing up on the deployer, here... by yusu Engager in Deployment Architecture 07-02-2020 0 1	0	1
Calculate total index size (without replication) Is there a way to calculate how the index size would be, if they wouldn't be replicated - i.e. how much disk size I w... by kutzi Path Finder in Deployment Architecture 07-02-2020 0 5	0	5
Unable to see all indexers by default. I've recently started a new job, of which one of my duties is to take over managing splunk from the previous administ... by CableB0y Engager in Deployment Architecture 07-01-2020 0 4	0	4
Is it better to have higher CPU for a search head or Indexer? HiI have just received 3 new machines for a Splunk cluster.The new machines are faster than my previous hardware. and... by robertlynch2020 Influencer in Deployment Architecture 07-01-2020 1 1	1	1
Best way to update mgmt_uri of a shcluster member Hello all,I have a search head cluster where everything is working well. We have one member of the cluster where the ... by mpettitt1 Loves-to-Learn Lots in Deployment Architecture 06-30-2020 0 8	0	8
Events.conf & Tags.conf Configuration Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise... by mag85032 Engager in Deployment Architecture 06-29-2020 0 0	0	0
Architecting for Splunk Total Beginner I am completely new to Splunk. I understand the basics but am lost on where to start with the designing for and suppo... by MatthewMcD Engager in Deployment Architecture 06-29-2020 0 3	0	3
Query on Heavy forwarder with SSL connecting to indexer with SSL. So should all the UF agent connections also have SSL Hello All,I have a UFs in cloud DCs.Proposed solution is to have SSL between the Indexer and the Heavy forwarders.Pl... by smartpraseetha New Member in Deployment Architecture 06-29-2020 0 3	0	3
Ingest Netflow Data using Windows, Linux, Cisco Netflow I would like some advice on what is the best way to implement the following solution.I would like to get netflow data... by Blackmagician Engager in Deployment Architecture 06-26-2020 0 0	0	0
Multiple stanza in inputs.conf for the same folder I want to monitor a folder /data/data1 with file inside -file1, file2, other_log, mail_log Here is the config [monit... by tlam_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 4	0	4
re-mapping cold path variable with smartstore We migrated almost all of our existing indexes from traditional indexes with separate warm and cold mount paths to sm... by rbal_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 1	0	1
Splunk Cluster: Index not Replicating Hello, I have been trying to configure a little lab enviroment to test the replication functionality of Splunk 5 (cu... by fbustamantes Explorer in Deployment Architecture 06-24-2020 2 3	2	3
Distributed search and scripted lookups In a distributed search environment, do the python files for scripted lookups have to be placed manually on the index... by bharaths New Member in Deployment Architecture 06-24-2020 0 3	0	3
What is SRM.exe? Does anyone know what c:\program files\splunkuniversalforwarder\bin\srm.exe is?Our AV has flagged the file as suspici... by fdarrigo Path Finder in Deployment Architecture 06-23-2020 0 1	0	1