Deployment Architecture

Community Activity

Splunk Metrics via Splunk Add on for *nix So, we aren't in an environment where we can just deploy apps (a la collectd) but want to get metrics in from Linux b... by Tohrment Path Finder in Deployment Architecture 07-03-2020 2 10	2	10
Assets and Identity in Splunk Search Head Cluster Issue Hello All,In the SH members, we are receiving the following error, while this is not showing up on the deployer, here... by yusu Engager in Deployment Architecture 07-02-2020 0 1	0	1
Calculate total index size (without replication) Is there a way to calculate how the index size would be, if they wouldn't be replicated - i.e. how much disk size I w... by kutzi Path Finder in Deployment Architecture 07-02-2020 0 5	0	5
Unable to see all indexers by default. I've recently started a new job, of which one of my duties is to take over managing splunk from the previous administ... by CableB0y Engager in Deployment Architecture 07-01-2020 0 4	0	4
Is it better to have higher CPU for a search head or Indexer? HiI have just received 3 new machines for a Splunk cluster.The new machines are faster than my previous hardware. and... by robertlynch2020 Influencer in Deployment Architecture 07-01-2020 1 1	1	1
Best way to update mgmt_uri of a shcluster member Hello all,I have a search head cluster where everything is working well. We have one member of the cluster where the ... by mpettitt1 Loves-to-Learn Lots in Deployment Architecture 06-30-2020 0 8	0	8
Events.conf & Tags.conf Configuration Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise... by mag85032 Engager in Deployment Architecture 06-29-2020 0 0	0	0
Architecting for Splunk Total Beginner I am completely new to Splunk. I understand the basics but am lost on where to start with the designing for and suppo... by MatthewMcD Engager in Deployment Architecture 06-29-2020 0 3	0	3
Query on Heavy forwarder with SSL connecting to indexer with SSL. So should all the UF agent connections also have SSL Hello All,I have a UFs in cloud DCs.Proposed solution is to have SSL between the Indexer and the Heavy forwarders.Pl... by smartpraseetha New Member in Deployment Architecture 06-29-2020 0 3	0	3
Ingest Netflow Data using Windows, Linux, Cisco Netflow I would like some advice on what is the best way to implement the following solution.I would like to get netflow data... by Blackmagician Engager in Deployment Architecture 06-26-2020 0 0	0	0
Multiple stanza in inputs.conf for the same folder I want to monitor a folder /data/data1 with file inside -file1, file2, other_log, mail_log Here is the config [monit... by tlam_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 4	0	4
re-mapping cold path variable with smartstore We migrated almost all of our existing indexes from traditional indexes with separate warm and cold mount paths to sm... by rbal_splunk Splunk Employee in Deployment Architecture 06-26-2020 0 1	0	1
Splunk Cluster: Index not Replicating Hello, I have been trying to configure a little lab enviroment to test the replication functionality of Splunk 5 (cu... by fbustamantes Explorer in Deployment Architecture 06-24-2020 2 3	2	3
Distributed search and scripted lookups In a distributed search environment, do the python files for scripted lookups have to be placed manually on the index... by bharaths New Member in Deployment Architecture 06-24-2020 0 3	0	3
What is SRM.exe? Does anyone know what c:\program files\splunkuniversalforwarder\bin\srm.exe is?Our AV has flagged the file as suspici... by fdarrigo Path Finder in Deployment Architecture 06-23-2020 0 1	0	1
what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on peer. what will happen if i reboot the cluster peer after running the maintenance mode on master and offline command on pee... by prashantmds New Member in Deployment Architecture 06-23-2020 0 0	0	0
Are my storage calculations correct? Given the following indexes.conf configurations are my calculations and thoughts correct?[default]# set TSIDX setting... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 0	0	0
What does "remove" mean in reference to maxVolumeDataSizeMB? Working on tuning indexers, volumes and storage. We are seeing indexers fill over what we anticipated so I wanted to ... by tkw03 Communicator in Deployment Architecture 06-22-2020 0 1	0	1
index cluster sending all data to third party Hello, I have an index cluster and would like to send ALL data to a non splunk third party end point. is this possibl... by willsy Communicator in Deployment Architecture 06-22-2020 0 0	0	0
Forward indexed logs from an Indexer Cluster to a third party system Hi Fellow Splunkers, I am looking to forward all Indexed data from an Indexer Cluster to another third party system. ... by TodaErika New Member in Deployment Architecture 06-22-2020 0 3	0	3
SHC New Member reverts to down after restart We are attempting to add three nodes to an existing SHC. We are able to add them, however they do not survive a resta... by jondukehds Explorer in Deployment Architecture 06-22-2020 0 2	0	2
ArtifactReplicator - Connection failed I see below error message in my search head cluster . Can some one please assist on this?06-18-2020 12:28:05.026 +010... by btshivanand Path Finder in Deployment Architecture 06-19-2020 0 4	0	4
What is the ideal DMC architecture for large environments? Hello all! I've inherited a large Splunk deployment and I've been given some leniency with setting up, or rather, rev... by milo Observer in Deployment Architecture 06-17-2020 0 4	0	4
Is there a trial version that allows API access? I am looking to create a proof-of-concept that intergrates splunk via API queries, however it appears the Splunk Ente... by nosaj0 New Member in Deployment Architecture 06-17-2020 0 1	0	1
Why is there high Mongod CPU usage on the search head? Hi, On my search head, Mongod is consuming most of my CPU usage: **115786 splunk 20 0 40.4g 10.6g 10.5g S ... by omprakash9998 Path Finder in Deployment Architecture 06-16-2020 1 6	1	6