Deployment Architecture

Community Activity

Why does splunk need to be installed as root? The docs mention installs need to be done as root (but don't really explain why)- http://docs.splunk.com/Documentatio... by pbrunel_splunk Splunk Employee in Deployment Architecture 04-25-2020 1 8	1	8
Cluster master register_replication_address Invalid hostname when adding peer nodes? I am trying to use invalid_replication_address to tell a cluster master running in front of an ELB to contact the ind... by ajiwanand Path Finder in Deployment Architecture 04-24-2020 0 7	0	7
Can I specify a dedicated network for cluster replication transport in a clustered environment? Hi In a clustered environment, network for replication needs to be fast.I have multiple network interfaces in a peer ... by melonman Motivator in Deployment Architecture 04-23-2020 1 4	1	4
Not being able to forward data from Windows UF to Splunkcloud I am having trouble forwarding data to Splunk cloud from a Windows host. Previously, Linux deployments gave no issues... by dannyze Explorer in Deployment Architecture 04-23-2020 0 2	0	2
OS Patching Indexer Cluster and bucket fixups We're struggling to do OS patching of our indexer cluster in a reasonable timeframe. It currently takes about 24 hour... by jarush Explorer in Deployment Architecture 04-22-2020 0 2	0	2
Why is there no "cluster master" in Splunk recommendations? Hi, We are sizing a Splunk infrastructure and I was looking at this page : Summary of performance recommendations htt... by psaminadin New Member in Deployment Architecture 04-22-2020 0 3	0	3
Splunk Web not accessible We are not able to access splunk web, receiving below error in web_service.log, please let me know if any one has an ... by abhijitnath89ax Loves-to-Learn in Deployment Architecture 04-21-2020 0 3	0	3
docker container for splunk exits with below error on restart (it runs fine as long as I keep it up) docker container for Splunk exits with below error on restart (it runs fine as long as I keep it up).I was designing ... by jagdish0886 Explorer in Deployment Architecture 04-21-2020 0 2	0	2
How to handle splunkbase apps with "[script::...]: stanzas in "inputs.conf" when deploying from Cluster Master in "master-apps" to "slave-apps"? How do you handle the fact that apps like Splunk_TA_nix and Splunk_TA_windows have relative paths like [script://./bi... by woodcock Esteemed Legend in Deployment Architecture 04-21-2020 2 2	2	2
How to architect in case where there are independent indexer clusters? Hi Guru! I have a question about clustering architecture. Let's say there are independent 5 idx cluster sites, who ha... by brandy81 Path Finder in Deployment Architecture 04-21-2020 0 1	0	1
SplunkForwarder installation disk availability Hello, We're planning a capacity adjustment activity (resize of C: drives).Our SplunkForwarders are installed on the ... by tom1981 Engager in Deployment Architecture 04-20-2020 0 4	0	4
Questions about transmitting all logs to Splunk's SIEM for each forwarder. Hello, I want to transmit all logs to Splunk's SIEM. Therefore, there are some questions. Q1. In our network system, ... by kevinsteeee Explorer in Deployment Architecture 04-20-2020 0 5	0	5
Corrupted bucket journal? Hi Everyone! I hope this isn't a "frequently solved problem." I've searched and googled for answers but I ran into a ... by clindseyssi Engager in Deployment Architecture 04-18-2020 3 9	3	9
What factors into how Splunk creates new hot buckets? Can anybody put some light on the factors based on why Splunk creates new Hot buckets?? Like maxDataSize and maxHotBu... by jitsinha Path Finder in Deployment Architecture 04-18-2020 0 3	0	3
How to find a stopped indexer from search head with SHC and IDC deployment I have a deployment with SHC and IDC (3 indexers), when I took down an indexer, all SHs would only see 2 search peers... by zhipengy_splunk Splunk Employee in Deployment Architecture 04-17-2020 0 6	0	6
how to restore TSIDX I am trying to execute the following command to restore TSIDX. splunk rebuild "bucket directory" What is correct t... by mcdp_matsumoto New Member in Deployment Architecture 04-16-2020 0 0	0	0
No spec file when validating bundle When trying to deploy a new cluster bundle I get errors with this verbage:[Not Critical]No spec file for: E:\Program... by computemoore78 New Member in Deployment Architecture 04-16-2020 0 1	0	1
Unable to add database connection for external lookups I am trying to add external database connection to be used in a lookup, however when I tried to add the database conn... by asaputra2610 New Member in Deployment Architecture 04-15-2020 0 0	0	0
Forwarder management UI shows delete record, what does it do? Title. What does delete record do? I have some problems with duplicate instance ID's which I've resolved but after re... by rnauman Explorer in Deployment Architecture 04-15-2020 2 4	2	4
Data Not found on indexer cluster Using Splunk Enterprise trail license : hi, I have forwarded a file to indexer cluster by installing universal forw... by shashi12345678 Engager in Deployment Architecture 04-13-2020 0 3	0	3
Error while deploying an app from the deployer Hi, I'm getting the below error while deploying an app from the deployer /opt/SP/apps/splunk/bin $ ./splunk apply shc... by Mohsin123 Path Finder in Deployment Architecture 04-13-2020 0 5	0	5
Splunk replication of old data I have a 5 node Indexer cluster with version 7.3.1.1. I added configuration to replicate data on indexer cluster but ... by rteja9 Path Finder in Deployment Architecture 04-13-2020 0 2	0	2
If I comment out the "enableTsidxReduction", will TSIDX be recreated? If I comment out the following settings, will TSIDX be recreated? enableTsidxReduction = true timePeriodInSecBeforeTs... by mcdp_matsumoto New Member in Deployment Architecture 04-13-2020 0 1	0	1
Netscaler AppFlow Independent Forwarder Hi, I am attempting to get some analytics from the Netscaler into Splunk via an Independent Forwarder using AppFlow p... by david2510 Engager in Deployment Architecture 04-11-2020 0 1	0	1
to establish connection between Indexer and searchhead Hi,During first time setup how to establish a connection between indexer and search head?In forwarder we are giving i... by VijaySrrie Builder in Deployment Architecture 04-11-2020 0 1	0	1