Deployment Architecture

Community Activity

Best way to update mgmt_uri of a shcluster member Hello all,I have a search head cluster where everything is working well. We have one member of the cluster where the ... by mpettitt1 Loves-to-Learn Lots in Deployment Architecture 06-30-2020 0 8	0	8
Events.conf & Tags.conf Configuration Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise... by mag85032 Engager in Deployment Architecture 06-29-2020 0 0	0	0
Architecting for Splunk Total Beginner I am completely new to Splunk. I understand the basics but am lost on where to start with the designing for and suppo... by MatthewMcD Engager in Deployment Architecture 06-29-2020 0 3	0	3
Query on Heavy forwarder with SSL connecting to indexer with SSL. So should all the UF agent connections also have SSL Hello All,I have a UFs in cloud DCs.Proposed solution is to have SSL between the Indexer and the Heavy forwarders.Pl... by smartpraseetha New Member in Deployment Architecture 06-29-2020 0 3	0	3
Ingest Netflow Data using Windows, Linux, Cisco Netflow I would like some advice on what is the best way to implement the following solution.I would like to get netflow data... by Blackmagician Engager in Deployment Architecture 06-26-2020 0 0	0	0
Multiple stanza in inputs.conf for the same folder I want to monitor a folder /data/data1 with file inside -file1, file2, other_log, mail_log Here is the config [monit... by tlam_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 4	0	4
re-mapping cold path variable with smartstore We migrated almost all of our existing indexes from traditional indexes with separate warm and cold mount paths to sm... by rbal_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 1	0	1
Splunk Cluster: Index not Replicating Hello, I have been trying to configure a little lab enviroment to test the replication functionality of Splunk 5 (cu... by fbustamantes Explorer in Deployment Architecture 06-24-2020 2 3	2	3
Distributed search and scripted lookups In a distributed search environment, do the python files for scripted lookups have to be placed manually on the index... by bharaths New Member in Deployment Architecture 06-24-2020 0 3	0	3
What is SRM.exe? Does anyone know what c:\program files\splunkuniversalforwarder\bin\srm.exe is?Our AV has flagged the file as suspici... by fdarrigo Path Finder in Deployment Architecture 06-23-2020 0 1	0	1
what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on peer. what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on pee... by prashantmds New Member in Deployment Architecture 06-23-2020 0 0	0	0
Are my storage calculations correct? Given the following indexes.conf configurations are my calculations and thoughts correct?[default]# set TSIDX setting... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 0	0	0
What does "remove" mean in reference to maxVolumeDataSizeMB? Working on tuning indexers, volumes and storage. We are seeing indexers fill over what we anticipated so I wanted to ... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 1	0	1
index cluster sending all data to third party Hello, I have an index cluster and would like to send ALL data to a non splunk third party end point. is this possibl... by willsy Communicator in Deployment Architecture 06-22-2020 0 0	0	0
Forward indexed logs from an Indexer Cluster to a third party system Hi Fellow Splunkers, I am looking to forward all Indexed data from an Indexer Cluster to another third party system. ... by TodaErika New Member in Deployment Architecture 06-22-2020 0 3	0	3
SHC New Member reverts to down after restart We are attempting to add three nodes to an existing SHC. We are able to add them, however they do not survive a resta... by jondukehds Explorer in Deployment Architecture 06-22-2020 0 2	0	2
ArtifactReplicator - Connection failed I see below error message in my search head cluster . Can some one please assist on this?06-18-2020 12:28:05.026 +010... by btshivanand Path Finder in Deployment Architecture 06-19-2020 0 4	0	4
What is the ideal DMC architecture for large environments? Hello all! I've inherited a large Splunk deployment and I've been given some leniency with setting up, or rather, rev... by milo Observer in Deployment Architecture 06-17-2020 0 4	0	4
Is there a trial version that allows API access? I am looking to create a proof-of-concept that intergrates splunk via API queries, however it appears the Splunk Ente... by nosaj0 New Member in Deployment Architecture 06-17-2020 0 1	0	1
Why is there high Mongod CPU usage on the search head? Hi, On my search head, Mongod is consuming most of my CPU usage: **115786 splunk 20 0 40.4g 10.6g 10.5g S ... by omprakash9998 Path Finder in Deployment Architecture 06-16-2020 1 6	1	6
Restore reduced buckets for a index in a cluster Hi everyone, I am following this Splunk doc regarding how to restore a reduce buckets: https://docs.splunk.com/Docume... by season88481 Contributor in Deployment Architecture 06-15-2020 0 1	0	1
AWS deployment requirements Hi guys,Looking to deploy Splunk on AWS and curious how it translates compared to physical servers. I have around 3TB... by mwdbhyat Builder in Deployment Architecture 06-15-2020 0 3	0	3
Uf + HF on on server Hi there,Currently running a UF + and HF on one box as well as it being a syslog collector. The HF needs to be there ... by mwdbhyat Builder in Deployment Architecture 06-14-2020 0 2	0	2
Buckets ending .rbsentinel in the clustered COLD directory of index and 0 size Hello guys,what are .rbsentinel files on clustered indexers?Could they conflict when thawing buckets if they have sam... by splunkreal Influencer in Deployment Architecture 06-12-2020 0 1	0	1
Configure Prometheus with Splunk Hi , I am a developer and looking to integrate my Prometheus with splunk Prometheus is up and running at my local (h... by ShubhneetChawla Explorer in Deployment Architecture 06-12-2020 1 4	1	4