Deployment Architecture

Discussions

Thread Info

SearchResultExecutorThread

Hello everybody, I'm having trouble with Splunk Search Head on version 7.0.5 which is crashing sometimes, I show t...

by New Member in

Replication Bundle Manual Removal Side-effects on 6.5.4

We have been witnessing an intermittent failures of bundle reaping in Splunk search heads and indexers on 6.5.4 Splun...

by Observer in

Migration to smartstore

I have 2 multisite clusters, how I migrate certain indexes from old cluster to new cluster, and configure smartstore ...

by Path Finder in

Index from one indexer to another (non-clustered)

Hello, So I have a rather unique issue that I am really having trouble with. We have a client that has their own s...

by Explorer in

why is /opt/splunk/var/run/splunk/cluster/search-buckets filling up?

Indexer '/splunk/var/run/splunk/cluster/search-buckets/ ' Files are still piled up. What is the purpose of the fil...

by New Member in

decrease number of bundle created in /opt/splunk/var/run

Can we decrease number of bundle created in /opt/splunk/var/run this folder is having its own bundles Also, i a...

by Motivator in

ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.

Hi, I have installed a new Linux forwader but I am not able to see logs from this forwader. I have set the depl...

by New Member in

how can i know the metrics logs capture from pipeline?

Hi splunkers! how can i know(/find) the metric logs capture from pipeline? I want to find the heavy forwarder reso...

by Engager in

Unable to add database connection for external lookups

I am trying to add external database connection to be used in a lookup, however when I tried to add the database conn...

by New Member in

How to upload lookup file using REST to specific app

All, I am trying to manage lookup csv files using REST API. 1) I create the lookup file on the stage folder: : ...

by Path Finder in

Can one dismiss the "Disconnected from Splunk server"

When the connection to Splunk is lost, the "Disconnected from Splunk server" message appears and the backdrop obscure...

by Communicator in

Test SHC running out of mem every day.

Hello, I have a test environment and the SHC members aren't allocated the recommended resources (because it's test)...

by Builder in

Deployment Server: Best practices for scaling

We've currently got just one DS in our environment handling about 1100 forwarders. Performance has been pretty stable...

by Contributor in

How to increase current log retention configuration of an index?

Hello, I've below configuration for one index. maxTotalDataSizeMB = 333400 maxDataSize = auto_high_volume hom...

by Loves-to-Learn in

Can not connect to splunk when using VM - splunk enterprise trial version

Hi, I have had this problem twice now on two different computers. I install debian/ubuntu Th...

by Loves-to-Learn Lots in

Failed to update bucket with remote metadata

Hello All, We have an index cluster which utilizes SmartStore in AWS S3. Things appear to be working but we ha...

by Engager in

Can't open splunk from masked domain

Whenever I try to open Splunk from a masked URL (a URL that points to a URL but shows the first URL in the browser se...

by New Member in

deploymentclient.conf getting overwritten

We are in the process of migrating a lot of hosts to report to a new deployment server. The deploymentclient.conf fil...

by Path Finder in

How hot bucket timespan is set ?

Hi Splunkers, While splunking on bucket statistics - I've noticed that despite the fact of default 90 days set ...

by Explorer in

Unable to perform any operation : Previously scheduled Remove Excess Buckets is running

Can someone help me to check if any way to stop the scheduled excess bucket removal? Or anything that could speed up ...

by Loves-to-Learn Lots in

Deployment Architecture

Discussions

SearchResultExecutorThread

Replication Bundle Manual Removal Side-effects on 6.5.4

Migration to smartstore

Index from one indexer to another (non-clustered)

why is /opt/splunk/var/run/splunk/cluster/search-buckets filling up?

decrease number of bundle created in /opt/splunk/var/run

ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.

how can i know the metrics logs capture from pipeline?

Unable to add database connection for external lookups

How to upload lookup file using REST to specific app

Can one dismiss the "Disconnected from Splunk server"

Test SHC running out of mem every day.

Deployment Server: Best practices for scaling

How to increase current log retention configuration of an index?

Can not connect to splunk when using VM - splunk enterprise trial version

Failed to update bucket with remote metadata

Can't open splunk from masked domain

deploymentclient.conf getting overwritten

How hot bucket timespan is set ?

Unable to perform any operation : Previously scheduled Remove Excess Buckets is running

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!

Learn More or Register Now >

[<indexer hostname>] Timed out waiting for peer <i...

Splunk memory usage

How much compression do I achieve when I enable TL...

Whats the safest and easiest way to merge multiple...

Splunk integration with third party systems

Deployment Architecture

Discussions

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too! Learn More or Register Now >

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!

Learn More or Register Now >