Deployment Architecture

Community Activity

Splunk redirecting to 127.0.0.1 behind haproxy We've added a self signed cert to our haproxy server which passes traffic on to our search head cluster. After doi... by jking81 Explorer in Deployment Architecture 03-16-2020 0 3	0	3
Migrating data from main index to new index in splunk cloud I have pushed all my sourcetype in the main index since it was streaming through single app. Now i required to move t... by rajiv_r Explorer in Deployment Architecture 03-16-2020 0 3	0	3
How to push higher Events into splunk server via TCP port. so the case goes as such , I am only able to push btw 55-60EPS(Events per seconds) into an index via TCP port "5000"... by chengappamj New Member in Deployment Architecture 03-14-2020 0 1	0	1
Heavy Forwarder TcpOutputProc output queue is not sending to AIO Dears Thanks A lot for helping Already. i have 2 heavy forwarders(HF) and one Indexer(AIO) Im facing this issue fo... by stromy Loves-to-Learn Lots in Deployment Architecture 03-13-2020 0 0	0	0
Is it possible to merge two search clusters? We have 2 separate search clusters fed by the same index cluster. The reason to have two search clusters was to host... by lianwan Explorer in Deployment Architecture 03-13-2020 0 3	0	3
How to find the number of DNS servers issued by the DHCP servers. How to find the number of DNS servers issued by the DHCP servers. Also, how to identify all DHCP servers in a particu... by sunnyft Explorer in Deployment Architecture 03-12-2020 1 3	1	3
Splunk Forwarder do not send all data Hi, I have installed splunk forwarder 8.0.2 to send data to the splunk entreprise 7.3.0. All day, multiple .err f... by clementros Path Finder in Deployment Architecture 03-12-2020 0 6	0	6
Why is it not recommended to use deployment server for deploying config bundles to Search head cluster ? Why is it not recommended to use deployment server for deploying config bundles to Search head cluster ? Why do we ne... by ashrafk Explorer in Deployment Architecture 03-11-2020 0 5	0	5
SHCluster: Deployer preserves apps instead of delete Hello team splunk. Using Splunk 8.0.1 in clustered seach head mode. I cannot delete some apps on searchhead cluster ... by ivohechmann Explorer in Deployment Architecture 03-11-2020 0 3	0	3
decrease number of bundle created in /opt/splunk/var/run Can we decrease number of bundle created in /opt/splunk/var/run this folder is having its own bundles Also, i am no... by vishaltaneja070 Motivator in Deployment Architecture 03-11-2020 0 0	0	0
Splunk forwarder on Linux - ./splunk "commands" just hang It has been a while since I have worked with Linux, but doing my best to refresh my knowledge. Successfully installed... by rune_hellem Contributor in Deployment Architecture 03-10-2020 0 7	0	7
Splunk forwarder on Linux won't show login when required (and also not able to phone home) I've installed the forwarder on Ubuntu and it did get the apps from the deployment server right after the install. Bu... by rune_hellem Contributor in Deployment Architecture 03-09-2020 0 3	0	3
What would be an optimal way to check whether a server is up? We have the following health check about the server being up or down - \| tstats latest(_time) as latest where index... by danielbb Motivator in Deployment Architecture 03-07-2020 0 2	0	2
Is it possible to make a splunk cluster with two servers ? Hello, I was wondering if it is possible to make a Splunk cluster (SH and Indexer cluster) using only two machines. ... by DavidHourani Super Champion in Deployment Architecture 03-06-2020 0 3	0	3
Any Ideas--Ensure metadata, tstats, lookups, and deployment server are in sync Hey all, We have hit-and-miss identification of servers that fall off of Splunk monitoring. There needs to be a crit... by nahfam Path Finder in Deployment Architecture 03-05-2020 0 1	0	1
Why does master node continue to be single point of failure in clustering ? Why does master node continue to be a single point of failure in clustering ? Or is there any plan to be HA in master... by sunrise Contributor in Deployment Architecture 03-05-2020 0 6	0	6
How to handle Multisite Cluster Master failure? Hi all, after checking the documentation I am still not much wiser. I hope some of you have perhaps encountered the... by MMCC Path Finder in Deployment Architecture 03-05-2020 0 5	0	5
splunk odbc driver for 7.2.6 version I hear "The Splunk ODBC Driver is not supported on Splunk platform versions 7.x" We are running splunk 7.2.6 on RHEL... by jiaqya Builder in Deployment Architecture 03-05-2020 3 3	3	3
Splunk to monitor multiple clients I am wanting to monitor multiple clients' networks with my Splunk install. I also need to make sure that the communi... by klulue New Member in Deployment Architecture 03-04-2020 0 1	0	1
Demand based script execution of script on UF My splunk architecture is as below: UF - > HF -> IX - SH Here, UF and HF are in same network where as IX and SH are i... by santosh_sshanbh Path Finder in Deployment Architecture 03-04-2020 0 7	0	7
Just installed splunk free on Ubuntu..can't start Splunk seems to have installed on Ubuntu 18.04 but the only place i see it is in the /opt dir and if i try to cd to i... by kmill78 Explorer in Deployment Architecture 03-04-2020 0 2	0	2
How to identify whether duplicates are happening from forwarders configuration or indexers? Hi Splunk Chaps, We are having issues with a data source where events are duplicated in the cluster. Strange that th... by PramodhKumar Explorer in Deployment Architecture 03-04-2020 0 2	0	2
how to find the immediate next passed build from the current failed build. Hi all, I have json file for each of the builds of jenkins. I want to calculate the Mean time to recovery , that is t... by anooshac Communicator in Deployment Architecture 03-03-2020 0 10	0	10
multisite site cluster - "Invalid site_replication_factor, Reason: total should be greater than or equal to replication_factor." I am configuring a multisite cluster and am confused by this error message. I have 2 sites and 4 nodes. The error mes... by brent_weaver Builder in Deployment Architecture 03-03-2020 0 11	0	11
How to specify S3 bucket name for the AWS Add-On for AWS in Cloudwatch input? Hi, Currently, the Cloudwatch Input is collecting all metrics for all of my S3 buckets as shown here: [{"BucketName... by edwardjkoh New Member in Deployment Architecture 03-02-2020 0 0	0	0