Deployment Architecture

Community Activity

Problem with reinstallation of apps/addons - error 404 HI, how to properly (completly) remove Splunk addon and install it again ? My deployment script redeploying all S... by conwaw Explorer in Deployment Architecture 04-30-2020 0 6	0	6
How to assign a password to the Universal Forwarder to prevent it from being uninstalled? Hello everyone, Is there a way to assign a password to the universal forwarder to prevent it from being uninstalled? ... by edgarsilva01 Path Finder in Deployment Architecture 04-28-2020 0 1	0	1
Systemd start restart for splunk not working as expected (CentOS 7.3). We are running a distributed Splunk appication on CentOS 7.3. Please find below our unit file: [Unit] Description=Spl... by keerthana_k Communicator in Deployment Architecture 04-28-2020 1 21	1	21
How to validate bucket rotation (retention parameters) via search? I recently introduced a few parameters around different buckets like hot, warm, cold, etc.Now I need to see if the bu... by sagaraverma Loves-to-Learn Everything in Deployment Architecture 04-28-2020 0 9	0	9
which technology is being used for csv lookup replication (SH/indexer replication) I want to understand which technology is being used while CSV lookup bundle replication. Is this whole CSV gets repli... by pargupta1234 New Member in Deployment Architecture 04-28-2020 0 1	0	1
How to create app in distributed Search Head ,without the deployer instance Hi, I want to create app in my Search head(SH) in distributed environment,but i do not have the deployer setup. i hav... by ashwinipatil007 New Member in Deployment Architecture 04-28-2020 0 1	0	1
What is the value of pass4symmkey on searchhead members Hi , I want to understand when SHC is enabled , does the cluster members ( /opt/apps/splunk/etc/system/local/server.c... by rashi83 Path Finder in Deployment Architecture 04-27-2020 0 1	0	1
How many IngestionPipelines into single-site distributed environment with 3 indexers ? Environment is single-site with 3 indexers and each indexer with parallelIngestionPipelines = 1(under /opt/splunk/etc... by sagaraverma Loves-to-Learn Everything in Deployment Architecture 04-26-2020 0 3	0	3
what is needed to speed up searhing? indexer cluster or search head cluster? he guys! i have 6 linux servers. i'm trying to understand what is needed to speedup searching: indexer cluster or sea... by highsplunker Contributor in Deployment Architecture 04-26-2020 0 4	0	4
Several search heads and several indexers WITHOUT replication is possible? Hey guys,Several search heads and several indexers WITHOUT replication is possible? I have several search heads "watc... by highsplunker Contributor in Deployment Architecture 04-26-2020 1 7	1	7
Why does splunk need to be installed as root? The docs mention installs need to be done as root (but don't really explain why)- http://docs.splunk.com/Documentatio... by pbrunel_splunk Splunk Employee in Deployment Architecture 04-25-2020 1 8	1	8
Cluster master register_replication_address Invalid hostname when adding peer nodes? I am trying to use invalid_replication_address to tell a cluster master running in front of an ELB to contact the ind... by ajiwanand Path Finder in Deployment Architecture 04-24-2020 0 7	0	7
Can I specify a dedicated network for cluster replication transport in a clustered environment? Hi In a clustered environment, network for replication needs to be fast.I have multiple network interfaces in a peer ... by melonman Motivator in Deployment Architecture 04-23-2020 1 4	1	4
Not being able to forward data from Windows UF to Splunkcloud I am having trouble forwarding data to Splunk cloud from a Windows host. Previously, Linux deployments gave no issues... by dannyze Explorer in Deployment Architecture 04-23-2020 0 2	0	2
OS Patching Indexer Cluster and bucket fixups We're struggling to do OS patching of our indexer cluster in a reasonable timeframe. It currently takes about 24 hour... by jarush Explorer in Deployment Architecture 04-22-2020 0 2	0	2
Why is there no "cluster master" in Splunk recommendations? Hi, We are sizing a Splunk infrastructure and I was looking at this page : Summary of performance recommendations htt... by psaminadin New Member in Deployment Architecture 04-22-2020 0 3	0	3
Splunk Web not accessible We are not able to access splunk web, receiving below error in web_service.log, please let me know if any one has an ... by abhijitnath89ax Loves-to-Learn in Deployment Architecture 04-21-2020 0 3	0	3
docker container for splunk exits with below error on restart (it runs fine as long as I keep it up) docker container for Splunk exits with below error on restart (it runs fine as long as I keep it up).I was designing ... by jagdish0886 Explorer in Deployment Architecture 04-21-2020 0 2	0	2
How to handle splunkbase apps with "[script::...]: stanzas in "inputs.conf" when deploying from Cluster Master in "master-apps" to "slave-apps"? How do you handle the fact that apps like Splunk_TA_nix and Splunk_TA_windows have relative paths like [script://./bi... by woodcock Esteemed Legend in Deployment Architecture 04-21-2020 2 2	2	2
How to architect in case where there are independent indexer clusters? Hi Guru! I have a question about clustering architecture. Let's say there are independent 5 idx cluster sites, who ha... by brandy81 Path Finder in Deployment Architecture 04-21-2020 0 1	0	1
SplunkForwarder installation disk availability Hello, We're planning a capacity adjustment activity (resize of C: drives).Our SplunkForwarders are installed on the ... by tom1981 Engager in Deployment Architecture 04-20-2020 0 4	0	4
Questions about transmitting all logs to Splunk's SIEM for each forwarder. Hello, I want to transmit all logs to Splunk's SIEM. Therefore, there are some questions. Q1. In our network system, ... by kevinsteeee Explorer in Deployment Architecture 04-20-2020 0 5	0	5
Corrupted bucket journal? Hi Everyone! I hope this isn't a "frequently solved problem." I've searched and googled for answers but I ran into a ... by clindseyssi Engager in Deployment Architecture 04-18-2020 3 9	3	9
What factors into how Splunk creates new hot buckets? Can anybody put some light on the factors based on why Splunk creates new Hot buckets?? Like maxDataSize and maxHotBu... by jitsinha Path Finder in Deployment Architecture 04-18-2020 0 3	0	3
How to find a stopped indexer from search head with SHC and IDC deployment I have a deployment with SHC and IDC (3 indexers), when I took down an indexer, all SHs would only see 2 search peers... by zhipengy_splunk Splunk Employee in Deployment Architecture 04-17-2020 0 6	0	6