Deployment Architecture

Community Activity

How you do create the merged_lexicon.lex after a bucket restore? How do you force the creation of the merged_lexicon.lex for a bucket that was manually restored? (And is this possib... by Lowell Super Champion in Deployment Architecture 04-03-2010 0 4	0	4
My filesystem is full and splunk stopped indexing, how do i make space/start splunk My filesystem is full and splunk wont start. How do i make some last minute filesystem space and start splunk? What a... by Chris_R_ Splunk Employee in Deployment Architecture 04-02-2010 3 2	3	2
Where is the best place for props.conf and transforms.conf? Hi folks I've got a distributed deployment and want to keep the overhead on the splunk forwarders as small as possib... by Simon Contributor in Deployment Architecture 03-29-2010 1 2	1	2
Where are the logs for buckets activity located Where can I find the log for the bucket activities? I want to troubleshoot on when Splunk checks bucket sizes and wh... by BunnyHop Contributor in Deployment Architecture 03-26-2010 1 2	1	2
How can you add/move a bucket without restarting splunkd? How do you get splunk to recognize new buckets without restarting splunkd? This makes the process of restoring or mo... by Lowell Super Champion in Deployment Architecture 03-24-2010 2 2	2	2
Any way to reduce the storage footprint of a Windows LWF in 4.0? I've reduced the log retention timeout so that the disk footprint doesn't grow. Is there any way to remove anything ... by dskillman Splunk Employee in Deployment Architecture 03-13-2010 2 2	2	2
Remove annoying restart messaging I don't want to restart splunk right now, but the UI is giving my and my users an annoying message saying I need to r... by benstraw Splunk Employee in Deployment Architecture 01-27-2010 2 2	2	2