Deployment Architecture

Community Activity

Unable to add search peer from search head using distributed search :no route to host or connection refused Issue:Unable to add search peer from search head using distributed search :no route to host or connection refused err... by RK_sp1unk New Member in Deployment Architecture 02-09-2020 0 3	0	3
Can't see newly created indexes on search head in distributed search I have a single indexer and single search head with the indexer attached as a search peer and I created one index cal... by kjstogn Explorer in Deployment Architecture 02-08-2020 0 1	0	1
Multi-site Indexer rolling restart - indexer fails to restart/timeout Using Splunk 7.3.3, after I initiated a rolling restart from the cluster master (multi-site indexer cluster), the fi... by DEAD_BEEF Builder in Deployment Architecture 02-08-2020 1 6	1	6
How can i monitor linux commands in splunk I have 2 servers in place (linux), and would like to monitor the command hit at putty. Is there any way where we can ... by kalpesh11 New Member in Deployment Architecture 02-07-2020 0 7	0	7
Why am I not receiving events into Splunk enterprise from the remote splunk forwarder? I have an enterprise and a forwarder on the remote system Mid Jan 2020 I am not receiving any events from the forward... by jerrin Explorer in Deployment Architecture 02-06-2020 0 1	0	1
Why do I get a massive amount of TcpOutputProc on my search head ? I have a search head cluster (3 search heads) and an indexer cluster (3 indexers). More than 10% of splunkd.log (on m... by yoho Contributor in Deployment Architecture 02-06-2020 1 2	1	2
Many buckets in "Cannot fix up primary restoration as previous mask change is in progress" state Using Indexer Clustering 7.0.4 and after some network outage issues I am getting 8600+ buckets with below pending fix... by cweiliou_splunk Splunk Employee in Deployment Architecture 02-05-2020 0 2	0	2
Shcluster captain errors i am trying to cofigure a search head cluster and getting an error socket_error= connect timeout while electing the ... by rajiv_r Explorer in Deployment Architecture 02-05-2020 0 1	0	1
Remove excess buckets via REST API We have some problems with excess buckets from time to time, and I am writing a python program to check for excess bu... by danman06 Explorer in Deployment Architecture 02-04-2020 0 3	0	3
Indexer clustering - bundle Hi All, I have 1 master cluster and 2 indexers . I've been using configuration bundle actions - push , several times... by hketer Path Finder in Deployment Architecture 02-04-2020 0 2	0	2
Splunk AWS integration Unable to Fetch instance Details Hi Team, We are using latest 7.1 Splunk Enterprise version of Splunk and integrated with our AWS enviroment. In the o... by shwetas Explorer in Deployment Architecture 02-04-2020 0 4	0	4
All my indexer assign to same app I created a indexes.conf file and placed it in my_all_indexes to keep them in one central location for easy managemen... by afolabia Path Finder in Deployment Architecture 02-04-2020 0 1	0	1
インデクサークラスター環境においてインデックスが重複するインデクサー2台でインデクサークラスター構成を組んでいます。Replication Factor:2 Search Factor:2 ※SmartStore利用ピアノードの再起動後、イベントの重複が発生しております。（splunk_... by ryoshikawa New Member in Deployment Architecture 02-03-2020 0 5	0	5
Does the blocking of a heavy forwarder cause data drop or event drop? I got a message that the TCP output processor has paused data flow. Forwarding to output group heavy forwarder has bl... by vrmandadi Builder in Deployment Architecture 02-03-2020 0 1	0	1
Is there a simple way to get all config files from $SPLUNK_HOME/etc? A fellow here would like to compare the config files across a cluster of three SHs. So, what's an easy way to get all... by danielbb Motivator in Deployment Architecture 02-03-2020 0 6	0	6
Which Deployer Push Mode which deployer push mode is best or rather, what are the benefits of not going with the default 'merge_to_default'? j... by mguhad Communicator in Deployment Architecture 02-03-2020 1 1	1	1
How do I update GeoLite2-City-Latest.mmdb on a deployment server? I have a deployment server configured. Inside, I have changed the GeoLite2-City.mmdb, but I know I'm having trouble m... by arnauec New Member in Deployment Architecture 02-03-2020 0 3	0	3
Install java in search heads in kubernetes I am trying to install java on my splunk search head in kubernetes. As indicated in previous forums, I tried adding t... by shashank_trip New Member in Deployment Architecture 02-03-2020 0 4	0	4
Rolling Upgrade on a big cluster With hundreds of indexer nodes in a cluster, it might take more than one business day to upgrade them all during a ro... by aramey Engager in Deployment Architecture 02-03-2020 0 1	0	1
Why does the master node, peer nodes, and search head have to be on its own instance? We have a single server that is running indexer, master and search head. As we only have 1 server, it is a single po... by josegonzalezm Engager in Deployment Architecture 02-03-2020 1 2	1	2
Splunk Deployment Server Hi I am a newbee to SPLUNK and am not sure how to set up the Deployment Server, Could anyone guide me with it. Than... by rajdiddi New Member in Deployment Architecture 02-03-2020 0 7	0	7
Index=perfmon deleted but still data is coming in We get performance monitor data from windows_ta and windows_ta_dns ..We no longer need the data and dont care about o... by vrmandadi Builder in Deployment Architecture 02-01-2020 0 5	0	5
When I run $SPLUNK_HOME/bin/splunk apply shcluster-bundle -action stage on my deployer, I get Your session is invalid. Please login. I put an app onto our deployer server under /opt/splunk/etc/shcluster/apps , ran the following: sudo su splunk cd /o... by cdhippen Path Finder in Deployment Architecture 01-30-2020 0 5	0	5
How to create ad-hoc reports on a new server For single server Web Traffic Hits Total page hits per hour per day for the last 10 days CPU Utilization over time C... by srikanth700 Loves-to-Learn Everything in Deployment Architecture 01-29-2020 0 3	0	3
How do I find out how many indexes in my splunk environment? Hey guys, I am relatively new to splunk, and I was wondering if there is a way to find out how many indexes are in m... by GeoCouloute Engager in Deployment Architecture 01-29-2020 1 3	1	3