Deployment Architecture

Community Activity

Splunk not restart Hi experts, I try to restart our splunk server, but its not start. Earlier I try to start from UI, but it not start. ... by arun_kant_sharm Path Finder in Deployment Architecture 05-21-2020 0 10	0	10
Search Heads are unable to distribute to Indexers Find that it has the frequent error message that the search head cannot connect to the Indexer. "Unable to distribute... by tlam_splunk Splunk Employee in Deployment Architecture 05-21-2020 0 2	0	2
How to package custom app in Default splunk package / executable? Hi folks, I have a requirement to add custom app in the default splunk executable. Currently, we are having splunk .t... by ayush1906 Communicator in Deployment Architecture 05-21-2020 0 4	0	4
How do we handle servers with untuned NTP service? We occasionally come across servers with universal forwarders or devices that send syslog and their NTP service is of... by ddrillic Ultra Champion in Deployment Architecture 05-21-2020 0 3	0	3
Search head had bad DNS entry - Now can't delete it from the cluster There was an extra incorrect A record in DNS for one of my search heads that I am building. As a result when I tried ... by morphis72 Path Finder in Deployment Architecture 05-21-2020 0 3	0	3
UniversalForwarder ParsingQueue filling up I have been troubleshooting blocked queues, and been gradually eliminating them. My last step was to switch from a he... by oliverj Communicator in Deployment Architecture 05-21-2020 0 8	0	8
Get data from different Splunk Instances? Hi, I have 3 different instances that are totally separate. First one is Standalone single SH Enterprise serverIndexe... by gyarici Path Finder in Deployment Architecture 05-20-2020 0 9	0	9
Identify Splunk instance role Hi, I need to find a way to identify if a Splunk instance is a an HF/UF/Indexer?Deployer/Deployment Server etc. in a... by mbasharat Builder in Deployment Architecture 05-19-2020 0 1	0	1
Can one dismiss the "Disconnected from Splunk server" When the connection to Splunk is lost, the "Disconnected from Splunk server" message appears and the backdrop obscure... by malvidin Communicator in Deployment Architecture 05-19-2020 0 0	0	0
Splunk Forwarders Input.Conf Setting Environment Variable I am looking for a way to deploy Splunk Forwarders to a Server Farm. I would like to package the installation and the... by ezajac Path Finder in Deployment Architecture 05-19-2020 0 6	0	6
DNS load balancing deployment client traffic I would like to be able distribute the load of universal forwarder based deployment client traffic across my pool of ... by dstaulcu Builder in Deployment Architecture 05-19-2020 0 15	0	15
How can I run S3 compatibility checking tool to test a object storage? I want to use a object storage（not AWS，but use S3） as splunk smartstore。So I use S3 compatibility tool offerd by splu... by xccfff New Member in Deployment Architecture 05-19-2020 0 0	0	0
Indexer Splunkd services are not able to run Please any one help on this In indexer cluster environment one of the Indexer got stopped unable to start/restart C... by phanichintha Path Finder in Deployment Architecture 05-18-2020 0 1	0	1
Questions about data models, data architecture, and performance implications. I have several questions about data architecture that are rooted in CIM data models and performance considerations. B... by joshbeckett Explorer in Deployment Architecture 05-15-2020 1 1	1	1
License usage in Indexer Cluster Hello, I have a simple question, Does using indexer clustering affect Index Per Day license usage? for example, if I ... by jg91 Path Finder in Deployment Architecture 05-14-2020 0 3	0	3
If maxDataSize in indexes.conf is for hot buckets, then what parameter needs to be defined to set the size for warm and cold buckets? In indexes.conf, it is given that "maxDataSize: The maximum size in MB for a hot DB to reach before a roll to warm is... by ankithreddy777 Contributor in Deployment Architecture 05-13-2020 0 6	0	6
how to configure Splunk search head cluster behind an F5 load balancer ? We don’t have anything set up currently for load balancing and this is something we are planning for first time using... by spsrasru Path Finder in Deployment Architecture 05-13-2020 0 8	0	8
What is the best practice for getting the RF and SF of multisite clustered environment? I have 2 sites that has more than 10 peers each site, each peer have different hardware specs. what is the best pract... by teddyidc1101 Communicator in Deployment Architecture 05-13-2020 0 0	0	0
How do i set a retention period for any index...? I am bit confused on setting up a retention period for an Index in splunk....If i need a retention period of 60 days ... by prakash007 Builder in Deployment Architecture 05-13-2020 1 11	1	11
Why are shared job results not available on other search head cluster members? We have a fully functional Search Head Cluster (6.2.4) behind a load balancer. Users connect to our Search Head Clust... by dflodstrom Builder in Deployment Architecture 05-11-2020 5 2	5	2
Can you please share the query to compare splunk indexers buckets older than 90 days from the current date with the hadoop data roll archived buckets Recently I have archived buckets of _internal index(older than 90 days) from one site of splunk indexers to Hadoop cl... by svelagala Loves-to-Learn in Deployment Architecture 05-10-2020 0 0	0	0
Data update to search head not on time. I faced an question about data cannot update to search head real time. i created serveral local app folder on one win... by reginali New Member in Deployment Architecture 05-09-2020 0 0	0	0
Is it possible to configure a SSL Splunk server to be the License Master of a non-SSL Splunk search head? Hi All, So I setup a stand alone Splunk Environment and the choice was made to bind it with SSL. So we have https://B... by Jarohnimo Builder in Deployment Architecture 05-08-2020 0 5	0	5
How to upload lookup file using REST to specific app All, I am trying to manage lookup csv files using REST API. 1) I create the lookup file on the stage folder: : ... by GersonGarcia Path Finder in Deployment Architecture 05-08-2020 0 0	0	0
How to monitor a process (rhnsd) on all Linux servers via a pie chart? How to monitor a process (rhnsd) on all Linux servers via a pie chart? For example, if on any server the rhnsd is run... by pradipto Explorer in Deployment Architecture 05-07-2020 0 9	0	9