Deployment Architecture

Community Activity

Best Practice to send SHC cluster data to Indexer tier with SSL Hi All, I have 2 certificates created 1 for forwarders and 1 for Indexers. Enabled SSL port as receiving port in clus... by ansif Motivator in Deployment Architecture 03-23-2020 0 1	0	1
UPD listening is not receiving events on one of my Universal Forwarders. UDP listening is not working on one of my UF's. Have PCAPs confirming the events are successfully making it from the ... by donaldwayne1975 Path Finder in Deployment Architecture 03-19-2020 0 3	0	3
REST API and search head cluster Hello, In our system, Splunk REST API does a login call to Splunk in one of the search heads and gets a token from th... by sarit_s Communicator in Deployment Architecture 03-19-2020 0 2	0	2
How to access REST API hosted on server using splunk Enterprise Query language I have my API's hosted on server. I want o know if we can write a splunk query to get the data from my API. // NOTE: ... by jeson240594 New Member in Deployment Architecture 03-19-2020 0 1	0	1
Why do I need layer-7 load balancer in front of Splunk Search Head Cluster We are trying to add a load balancer in front of our Splunk Search Head Cluster (SHC), according to the official doc,... by xchang1226 Path Finder in Deployment Architecture 03-18-2020 0 1	0	1
Unable to deploy an custom app through a deployer Hello Team , i have built search head cluster and i 'm trying to deploy and app thru deployer but getting the error ... by srikanth1216 New Member in Deployment Architecture 03-17-2020 0 2	0	2
search head cluster with ansible and kubernetese Hello how can i configure search heade cluster with ansible and kubernetese ? this is my configuration : splunk-ch... by sarit_s Communicator in Deployment Architecture 03-16-2020 0 2	0	2
Why are my processing queues full on some indexers, and nearly empty on others? In my indexer cluster, on the MC under "Indexing>Performance>Indexing Performance: Deployment" I'm noticing that some... by brentrmc Explorer in Deployment Architecture 03-16-2020 0 5	0	5
licensing in a distributed deployment we've recently migrated to a distributed deployment, with a licensing server. a recent surge in events caused licensi... by brettcave Builder in Deployment Architecture 03-16-2020 0 4	0	4
Splunk redirecting to 127.0.0.1 behind haproxy We've added a self signed cert to our haproxy server which passes traffic on to our search head cluster. After doi... by jking81 Explorer in Deployment Architecture 03-16-2020 0 3	0	3
Migrating data from main index to new index in splunk cloud I have pushed all my sourcetype in the main index since it was streaming through single app. Now i required to move t... by rajiv_r Explorer in Deployment Architecture 03-16-2020 0 3	0	3
How to push higher Events into splunk server via TCP port. so the case goes as such , I am only able to push btw 55-60EPS(Events per seconds) into an index via TCP port "5000"... by chengappamj New Member in Deployment Architecture 03-14-2020 0 1	0	1
Heavy Forwarder TcpOutputProc output queue is not sending to AIO Dears Thanks A lot for helping Already. i have 2 heavy forwarders(HF) and one Indexer(AIO) Im facing this issue fo... by stromy Loves-to-Learn Lots in Deployment Architecture 03-13-2020 0 0	0	0
Is it possible to merge two search clusters? We have 2 separate search clusters fed by the same index cluster. The reason to have two search clusters was to host... by lianwan Explorer in Deployment Architecture 03-13-2020 0 3	0	3
How to find the number of DNS servers issued by the DHCP servers. How to find the number of DNS servers issued by the DHCP servers. Also, how to identify all DHCP servers in a particu... by sunnyft Explorer in Deployment Architecture 03-12-2020 1 3	1	3
Splunk Forwarder do not send all data Hi, I have installed splunk forwarder 8.0.2 to send data to the splunk entreprise 7.3.0. All day, multiple .err f... by clementros Path Finder in Deployment Architecture 03-12-2020 0 6	0	6
Why is it not recommended to use deployment server for deploying config bundles to Search head cluster ? Why is it not recommended to use deployment server for deploying config bundles to Search head cluster ? Why do we ne... by ashrafk Explorer in Deployment Architecture 03-11-2020 0 5	0	5
SHCluster: Deployer preserves apps instead of delete Hello team splunk. Using Splunk 8.0.1 in clustered seach head mode. I cannot delete some apps on searchhead cluster ... by ivohechmann Explorer in Deployment Architecture 03-11-2020 0 3	0	3
decrease number of bundle created in /opt/splunk/var/run Can we decrease number of bundle created in /opt/splunk/var/run this folder is having its own bundles Also, i am no... by vishaltaneja070 Motivator in Deployment Architecture 03-11-2020 0 0	0	0
Splunk forwarder on Linux - ./splunk "commands" just hang It has been a while since I have worked with Linux, but doing my best to refresh my knowledge. Successfully installed... by rune_hellem Contributor in Deployment Architecture 03-10-2020 0 7	0	7
Splunk forwarder on Linux won't show login when required (and also not able to phone home) I've installed the forwarder on Ubuntu and it did get the apps from the deployment server right after the install. Bu... by rune_hellem Contributor in Deployment Architecture 03-09-2020 0 3	0	3
What would be an optimal way to check whether a server is up? We have the following health check about the server being up or down - \| tstats latest(_time) as latest where index... by danielbb Motivator in Deployment Architecture 03-07-2020 0 2	0	2
Is it possible to make a splunk cluster with two servers ? Hello, I was wondering if it is possible to make a Splunk cluster (SH and Indexer cluster) using only two machines. ... by DavidHourani Super Champion in Deployment Architecture 03-06-2020 0 3	0	3
Any Ideas--Ensure metadata, tstats, lookups, and deployment server are in sync Hey all, We have hit-and-miss identification of servers that fall off of Splunk monitoring. There needs to be a crit... by nahfam Path Finder in Deployment Architecture 03-05-2020 0 1	0	1
Why does master node continue to be single point of failure in clustering ? Why does master node continue to be a single point of failure in clustering ? Or is there any plan to be HA in master... by sunrise Contributor in Deployment Architecture 03-05-2020 0 6	0	6