Deployment Architecture

Community Activity

Need a help to setup distributed monitoring console Hi All,We are planning to build on separate Linux server for DMC and we have below components.Search Head cluster - 2... by santhanam95 Observer in Deployment Architecture 07-09-2020 0 2	0	2
Rawdata contains non-compressed file Due to migration from a stand-alone indexer (on Windows) to three-node indexer cluster (CentOS), we are doing a test ... by MaverickT Communicator in Deployment Architecture 07-09-2020 0 2	0	2
Splunk shows cluster-status --verbose only shows 'main' index We have an indexer cluster with several custom indexes configured in the indexes.conf, however when we run: splunk ... by kutzi Path Finder in Deployment Architecture 07-08-2020 0 2	0	2
Splunk Architecture Guidance on colocation best practices for the Search Head Cluster Deployer. Hello,While this helpful Splunk document ( https://docs.splunk.com/Documentation/Splunk/8.0.4/Deploy/Manageyourdeploy... by adnankhan5133 Communicator in Deployment Architecture 07-07-2020 0 1	0	1
Clustered Index Backup and Restore Options in Oracle Cloud (OCI) We have clustered indexing as part of our Splunk architecture deployed on Oracle Cloud and trying to come up with a r... by adnankhan5133 Communicator in Deployment Architecture 07-06-2020 0 0	0	0
Strategies for moving indexes to new datacenter Are there any recommended strategies for moving the index data to a new data center? We're planning to build up a new... by kutzi Path Finder in Deployment Architecture 07-06-2020 0 9	0	9
Splunk Metrics via Splunk Add on for *nix So, we aren't in an environment where we can just deploy apps (a la collectd) but want to get metrics in from Linux b... by Tohrment Path Finder in Deployment Architecture 07-03-2020 2 10	2	10
Assets and Identity in Splunk Search Head Cluster Issue Hello All,In the SH members, we are receiving the following error, while this is not showing up on the deployer, here... by yusu Engager in Deployment Architecture 07-02-2020 0 1	0	1
Calculate total index size (without replication) Is there a way to calculate how the index size would be, if they wouldn't be replicated - i.e. how much disk size I w... by kutzi Path Finder in Deployment Architecture 07-02-2020 0 5	0	5
Unable to see all indexers by default. I've recently started a new job, of which one of my duties is to take over managing splunk from the previous administ... by CableB0y Engager in Deployment Architecture 07-01-2020 0 4	0	4
Is it better to have higher CPU for a search head or Indexer? HiI have just received 3 new machines for a Splunk cluster.The new machines are faster than my previous hardware. and... by robertlynch2020 Influencer in Deployment Architecture 07-01-2020 1 1	1	1
Best way to update mgmt_uri of a shcluster member Hello all,I have a search head cluster where everything is working well. We have one member of the cluster where the ... by mpettitt1 Loves-to-Learn Lots in Deployment Architecture 06-30-2020 0 8	0	8
Events.conf & Tags.conf Configuration Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise... by mag85032 Engager in Deployment Architecture 06-29-2020 0 0	0	0
Architecting for Splunk Total Beginner I am completely new to Splunk. I understand the basics but am lost on where to start with the designing for and suppo... by MatthewMcD Engager in Deployment Architecture 06-29-2020 0 3	0	3
Query on Heavy forwarder with SSL connecting to indexer with SSL. So should all the UF agent connections also have SSL Hello All,I have a UFs in cloud DCs.Proposed solution is to have SSL between the Indexer and the Heavy forwarders.Pl... by smartpraseetha New Member in Deployment Architecture 06-29-2020 0 3	0	3
Ingest Netflow Data using Windows, Linux, Cisco Netflow I would like some advice on what is the best way to implement the following solution.I would like to get netflow data... by Blackmagician Engager in Deployment Architecture 06-26-2020 0 0	0	0
Multiple stanza in inputs.conf for the same folder I want to monitor a folder /data/data1 with file inside -file1, file2, other_log, mail_log Here is the config [monit... by tlam_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 4	0	4
re-mapping cold path variable with smartstore We migrated almost all of our existing indexes from traditional indexes with separate warm and cold mount paths to sm... by rbal_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 1	0	1
Splunk Cluster: Index not Replicating Hello, I have been trying to configure a little lab enviroment to test the replication functionality of Splunk 5 (cu... by fbustamantes Explorer in Deployment Architecture 06-24-2020 2 3	2	3
Distributed search and scripted lookups In a distributed search environment, do the python files for scripted lookups have to be placed manually on the index... by bharaths New Member in Deployment Architecture 06-24-2020 0 3	0	3
What is SRM.exe? Does anyone know what c:\program files\splunkuniversalforwarder\bin\srm.exe is?Our AV has flagged the file as suspici... by fdarrigo Path Finder in Deployment Architecture 06-23-2020 0 1	0	1
what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on peer. what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on pee... by prashantmds New Member in Deployment Architecture 06-23-2020 0 0	0	0
Are my storage calculations correct? Given the following indexes.conf configurations are my calculations and thoughts correct?[default]# set TSIDX setting... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 0	0	0
What does "remove" mean in reference to maxVolumeDataSizeMB? Working on tuning indexers, volumes and storage. We are seeing indexers fill over what we anticipated so I wanted to ... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 1	0	1
index cluster sending all data to third party Hello, I have an index cluster and would like to send ALL data to a non splunk third party end point. is this possibl... by willsy Communicator in Deployment Architecture 06-22-2020 0 0	0	0