Deployment Architecture

Community Activity

Load balancing intermediate forwarders We have intermediate forwarders that receive data from UFs and then forward it to our indexer cluster that consists o... by ialahdal Path Finder in Deployment Architecture 06-10-2020 1 5	1	5
Update Universal Forwarder How can I update 300 forwarders quickly?Is there any method? by edgarsilva01 Path Finder in Deployment Architecture 06-10-2020 1 6	1	6
Check Deployer and search head status in internal logs I am trying to monitor deployer and search head service status using _internal logs.Which fields should I consider to... by snigdhasaxena Communicator in Deployment Architecture 06-03-2020 0 3	0	3
Indexer Clustering - One Peer will be down for Server Battery Replacement Hi Splunkers, One of our Splunk Clustered Indexer (Physical Server) will go thru to a battery replacement that might ... by jaracan Communicator in Deployment Architecture 06-03-2020 0 3	0	3
How to install forwarders on MSSQL cluster/windows on Splunk Cloud? Could anyone please help me out with a detailed description of how to install forwarders on MSSQL Cluster/Windows?We ... by simranrathi123 Engager in Deployment Architecture 06-02-2020 0 2	0	2
Can Splunk Forwarders be set to restart after system reboot. If yes then what is the process for it? I want to setup my splunk forwarders on linux machines to restart automatically after the linux machines are rebooted... by prernaprakash New Member in Deployment Architecture 06-01-2020 0 2	0	2
Do we need to reload the deployment server before phonehoming takes place? Hello All, I have below questions on the reload command and phonehoming which I need to confirm:1. Both the deploy re... by abhi04 Communicator in Deployment Architecture 05-30-2020 0 4	0	4
Search Head Deployer error message Has anyone seen this error before? <?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="ERRO... by kmugglet Communicator in Deployment Architecture 05-29-2020 0 10	0	10
Splunk Search Head Integration with SAML Hi All, I have 4 SH cluster members for which i have to integrate SAML. Our AD team is asking the below information r... by keishamtcs Explorer in Deployment Architecture 05-29-2020 0 3	0	3
Error Message on indexer console I'm seeing the error below under messages in my Splunk enterprise console: Missing or malformed messages.conf stanza... by ngct2020 New Member in Deployment Architecture 05-28-2020 0 5	0	5
Splunk License Master Hi All, My Production License Master link directly it's open with out credentials and it's not showing the Account se... by vijareddy8067 New Member in Deployment Architecture 05-28-2020 0 0	0	0
Issues with search head cluster linked to two index clusters I have a Search Head Cluster able to query in two index cluster. It used to be linked to a single index cluster and I... by freaklin Path Finder in Deployment Architecture 05-26-2020 0 0	0	0
Possible combinations of Splunk Instances with different Roles Hi all, I'm often facing the question in which way Splunk Instances with different Roles can be combined - especially... by christian_l Path Finder in Deployment Architecture 05-26-2020 2 5	2	5
Why did our search head crash? and how can we prevent it? Our search head crashed, saying - -- Apr 23 09:00:35 kernel: Out of memory: Kill process 2137 (splunkd) score 162 or ... by danielbb Motivator in Deployment Architecture 05-25-2020 0 2	0	2
Why are Security Roles, Indexes not showing up on SHC? I have a number of indexes that only exist on the indexers. In the past, I know that I have been able to select them ... by JDukeSplunk Builder in Deployment Architecture 05-25-2020 1 4	1	4
Web_service.log is empty after upgrading from Splunk version 7.3 to 8.0. I have just upgraded my Splunk deployment server from 7.3 to 8.0 and after upgrading the web UI will not come up. I w... by dolj Explorer in Deployment Architecture 05-24-2020 0 6	0	6
Deployment Server and deployment apps issue. I am having issues with my deployment app config files. Whenever I edit the config file for my applications in my dep... by splunktrainingu Communicator in Deployment Architecture 05-22-2020 0 1	0	1
Any Risk if increased/decreased index data size Hi, I have created one index of size 500GB(maxTotalDataSizeMb) and also included frozen path where data will get stor... by ips_mandar Builder in Deployment Architecture 05-22-2020 0 1	0	1
Splunk using 8089 port for SSL Version 1 and 3 Protocol communication As the security search report,Security team find out port 8089 had a some of the security issue here. How I can di... by soralai New Member in Deployment Architecture 05-22-2020 0 1	0	1
No route to host at 8089 cluster My indexer cluster is down except for 1 out of 6. 8089 is suddenly not working for indexers and CM<>indexer comms and... by mguhad Communicator in Deployment Architecture 05-22-2020 0 17	0	17
Splunk not restart Hi experts, I try to restart our splunk server, but its not start. Earlier I try to start from UI, but it not start. ... by arun_kant_sharm Path Finder in Deployment Architecture 05-21-2020 0 10	0	10
Search Heads are unable to distribute to Indexers Find that it has the frequent error message that the search head cannot connect to the Indexer. "Unable to distribute... by tlam_splunk Splunk Employee in Deployment Architecture 05-21-2020 0 2	0	2
How to package custom app in Default splunk package / executable? Hi folks, I have a requirement to add custom app in the default splunk executable. Currently, we are having splunk .t... by ayush1906 Communicator in Deployment Architecture 05-21-2020 0 4	0	4
How do we handle servers with untuned NTP service? We occasionally come across servers with universal forwarders or devices that send syslog and their NTP service is of... by ddrillic Ultra Champion in Deployment Architecture 05-21-2020 0 3	0	3
Search head had bad DNS entry - Now can't delete it from the cluster There was an extra incorrect A record in DNS for one of my search heads that I am building. As a result when I tried ... by morphis72 Path Finder in Deployment Architecture 05-21-2020 0 3	0	3