Deployment Architecture

Community Activity

Dose Universal forwarder do line breaking? Hi As I see many documents and comments here, Universal forwarder do not break line. with "LINE_BREAKER" in props.con... by brandy81 Path Finder in Deployment Architecture 07-20-2020 0 3	0	3
licensing Hi,Searching: When a host reaches 1gb memory consumed per day fire an alert?This will has to be real-time. by dani9 Explorer in Deployment Architecture 07-20-2020 0 1	0	1
Splunk Failover Capabilities - DNS We have a multi-site (Production - Site 1, DR - Site 2) Enterprise Security deployment with clustered indexing. Searc... by adnankhan5133 Communicator in Deployment Architecture 07-19-2020 0 2	0	2
Any IOPS recommendations for cold bucket block volume? Looking for cheap storage. The volume where the hot/warm data resides shall be running on a disk with at least 1200 IOPS, since Splunk Enterpris... by adnankhan5133 Communicator in Deployment Architecture 07-17-2020 0 1	0	1
FILTERING Hi,I have 2 sources log so much like 2 gb per day just them.What could I do to limit it? Is possible to set some filt... by dani9 Explorer in Deployment Architecture 07-17-2020 0 3	0	3
license Questions:1) How much does a license from 5gb per day cost? 2) Where could that be bought?2) When license overcomes l... by dani9 Explorer in Deployment Architecture 07-17-2020 0 1	0	1
Is there a way to catch error from the Splunk cmd window when trying to backup kvstore from batch file in windows? Hello Experts. I'm trying to backup our kvstores with the well documented backup command in a windows batch file. I t... by paulito123 Explorer in Deployment Architecture 07-16-2020 0 0	0	0
Understanding the hierarchy of configuration files. Good afternoon, I'm a regular reader, but this is my first time writing, so I'll introduce myself. I'm Luis and work ... by Luis_Torres Loves-to-Learn Lots in Deployment Architecture 07-15-2020 0 2	0	2
How to correctly monitoring a .csv in the Heavy Forwarder instance? HelloCan someone recommend me the necessary steps to be able to correctly monitoring a .csv in the Heavy Forwarder in... by Luis_Torres Loves-to-Learn Lots in Deployment Architecture 07-15-2020 0 3	0	3
ndex clustering question (troubleshooting sbux)..Missing={ default:1 } One of our indexer cluster crashes and CM is showing many messages like Missing enough suitable candidates to creat... by sat94541 Communicator in Deployment Architecture 07-14-2020 1 2	1	2
Distributed Monitoring Console "Apply Changes" is not taking effect Hi There,After making changes such as editing server roles, adding search peers in Distributed Monitoring console I a... by Manjushree New Member in Deployment Architecture 07-14-2020 0 3	0	3
Not able to create new index in standalone instance of Splunk indexer Hi All, I've created new app with all the indexes required and have added all the stanzas for parameters.Restarted th... by rupeshn Explorer in Deployment Architecture 07-13-2020 0 2	0	2
Datamodel acceleration storage calculation Hi,Based on the Splunk documentation to calculate the storage for accelerated data for a year isAccelerated data mode... by ajaykumar03 New Member in Deployment Architecture 07-13-2020 0 1	0	1
I have a Splunk Enterprise Search Head in a Production and a second one in a Non-Prod environment. Any best practices fo The search head in the Non-Prod environment will not be active and would only be turned on in the event of a disaster... by adnankhan5133 Communicator in Deployment Architecture 07-09-2020 0 3	0	3
Need a help to setup distributed monitoring console Hi All,We are planning to build on separate Linux server for DMC and we have below components.Search Head cluster - 2... by santhanam95 Observer in Deployment Architecture 07-09-2020 0 2	0	2
Rawdata contains non-compressed file Due to migration from a stand-alone indexer (on Windows) to three-node indexer cluster (CentOS), we are doing a test ... by MaverickT Communicator in Deployment Architecture 07-09-2020 0 2	0	2
Splunk shows cluster-status --verbose only shows 'main' index We have an indexer cluster with several custom indexes configured in the indexes.conf, however when we run: splunk ... by kutzi Path Finder in Deployment Architecture 07-08-2020 0 2	0	2
Splunk Architecture Guidance on colocation best practices for the Search Head Cluster Deployer. Hello,While this helpful Splunk document ( https://docs.splunk.com/Documentation/Splunk/8.0.4/Deploy/Manageyourdeploy... by adnankhan5133 Communicator in Deployment Architecture 07-07-2020 0 1	0	1
Clustered Index Backup and Restore Options in Oracle Cloud (OCI) We have clustered indexing as part of our Splunk architecture deployed on Oracle Cloud and trying to come up with a r... by adnankhan5133 Communicator in Deployment Architecture 07-06-2020 0 0	0	0
Strategies for moving indexes to new datacenter Are there any recommended strategies for moving the index data to a new data center? We're planning to build up a new... by kutzi Path Finder in Deployment Architecture 07-06-2020 0 9	0	9
Splunk Metrics via Splunk Add on for *nix So, we aren't in an environment where we can just deploy apps (a la collectd) but want to get metrics in from Linux b... by Tohrment Path Finder in Deployment Architecture 07-03-2020 2 10	2	10
Assets and Identity in Splunk Search Head Cluster Issue Hello All,In the SH members, we are receiving the following error, while this is not showing up on the deployer, here... by yusu Engager in Deployment Architecture 07-02-2020 0 1	0	1
Calculate total index size (without replication) Is there a way to calculate how the index size would be, if they wouldn't be replicated - i.e. how much disk size I w... by kutzi Path Finder in Deployment Architecture 07-02-2020 0 5	0	5
Unable to see all indexers by default. I've recently started a new job, of which one of my duties is to take over managing splunk from the previous administ... by CableB0y Engager in Deployment Architecture 07-01-2020 0 4	0	4
Is it better to have higher CPU for a search head or Indexer? HiI have just received 3 new machines for a Splunk cluster.The new machines are faster than my previous hardware. and... by robertlynch2020 Influencer in Deployment Architecture 07-01-2020 1 1	1	1