Deployment Architecture

Community Activity

Shcluster captain errors i am trying to cofigure a search head cluster and getting an error socket_error= connect timeout while electing the ... by rajiv_r Explorer in Deployment Architecture 02-05-2020 0 1	0	1
Remove excess buckets via REST API We have some problems with excess buckets from time to time, and I am writing a python program to check for excess bu... by danman06 Explorer in Deployment Architecture 02-04-2020 0 3	0	3
Indexer clustering - bundle Hi All, I have 1 master cluster and 2 indexers . I've been using configuration bundle actions - push , several times... by hketer Path Finder in Deployment Architecture 02-04-2020 0 2	0	2
Splunk AWS integration Unable to Fetch instance Details Hi Team, We are using latest 7.1 Splunk Enterprise version of Splunk and integrated with our AWS enviroment. In the o... by shwetas Explorer in Deployment Architecture 02-04-2020 0 4	0	4
All my indexer assign to same app I created a indexes.conf file and placed it in my_all_indexes to keep them in one central location for easy managemen... by afolabia Path Finder in Deployment Architecture 02-04-2020 0 1	0	1
インデクサークラスター環境においてインデックスが重複するインデクサー2台でインデクサークラスター構成を組んでいます。Replication Factor:2 Search Factor:2 ※SmartStore利用ピアノードの再起動後、イベントの重複が発生しております。（splunk_... by ryoshikawa New Member in Deployment Architecture 02-03-2020 0 5	0	5
Does the blocking of a heavy forwarder cause data drop or event drop? I got a message that the TCP output processor has paused data flow. Forwarding to output group heavy forwarder has bl... by vrmandadi Builder in Deployment Architecture 02-03-2020 0 1	0	1
Is there a simple way to get all config files from $SPLUNK_HOME/etc? A fellow here would like to compare the config files across a cluster of three SHs. So, what's an easy way to get all... by danielbb Motivator in Deployment Architecture 02-03-2020 0 6	0	6
Which Deployer Push Mode which deployer push mode is best or rather, what are the benefits of not going with the default 'merge_to_default'? j... by mguhad Communicator in Deployment Architecture 02-03-2020 1 1	1	1
How do I update GeoLite2-City-Latest.mmdb on a deployment server? I have a deployment server configured. Inside, I have changed the GeoLite2-City.mmdb, but I know I'm having trouble m... by arnauec New Member in Deployment Architecture 02-03-2020 0 3	0	3
Install java in search heads in kubernetes I am trying to install java on my splunk search head in kubernetes. As indicated in previous forums, I tried adding t... by shashank_trip New Member in Deployment Architecture 02-03-2020 0 4	0	4
Rolling Upgrade on a big cluster With hundreds of indexer nodes in a cluster, it might take more than one business day to upgrade them all during a ro... by aramey Engager in Deployment Architecture 02-03-2020 0 1	0	1
Why does the master node, peer nodes, and search head have to be on its own instance? We have a single server that is running indexer, master and search head. As we only have 1 server, it is a single po... by josegonzalezm Engager in Deployment Architecture 02-03-2020 1 2	1	2
Splunk Deployment Server Hi I am a newbee to SPLUNK and am not sure how to set up the Deployment Server, Could anyone guide me with it. Than... by rajdiddi New Member in Deployment Architecture 02-03-2020 0 7	0	7
Index=perfmon deleted but still data is coming in We get performance monitor data from windows_ta and windows_ta_dns ..We no longer need the data and dont care about o... by vrmandadi Builder in Deployment Architecture 02-01-2020 0 5	0	5
When I run $SPLUNK_HOME/bin/splunk apply shcluster-bundle -action stage on my deployer, I get Your session is invalid. Please login. I put an app onto our deployer server under /opt/splunk/etc/shcluster/apps , ran the following: sudo su splunk cd /o... by cdhippen Path Finder in Deployment Architecture 01-30-2020 0 5	0	5
How to create ad-hoc reports on a new server For single server Web Traffic Hits Total page hits per hour per day for the last 10 days CPU Utilization over time C... by srikanth700 Loves-to-Learn Everything in Deployment Architecture 01-29-2020 0 3	0	3
How do I find out how many indexes in my splunk environment? Hey guys, I am relatively new to splunk, and I was wondering if there is a way to find out how many indexes are in m... by GeoCouloute Engager in Deployment Architecture 01-29-2020 1 3	1	3
Why do newly created indexes not show up on the search head? Hi fellow Splunkers! I have a working distributed environment, containing an indexer cluster with a separate master ... by horsefez Motivator in Deployment Architecture 01-29-2020 0 8	0	8
Splunk on Kubernetes - replication constraints Hi, i am running Splunk on Kubernetes with SmartStore. In order to increase node CPU/memory utilization, I have coll... by sscharma New Member in Deployment Architecture 01-29-2020 0 1	0	1
Cold to Frozen buckets question Hi @All, I will explain my situation now: On my Splunk Enterprise (7.2.6) environment I have configured the option C... by paccio84 New Member in Deployment Architecture 01-29-2020 0 1	0	1
How to set a new pass4SymmKey password on a search head cluster deployer? Hello, We have a Search head cluster in our environment and the person who set up the Deployer initially forgot the ... by Raghav2384 Motivator in Deployment Architecture 01-28-2020 1 12	1	12
Migrating files from etc/system to slave-apps in cluster Hi, i was running a single indexer which has props / transforms in etc/system/local. The indexer was migrated to an ... by brettcave Builder in Deployment Architecture 01-28-2020 0 1	0	1
Deployment Server - local folder not being pushed to Search Head cluster On my Deployment server in the /opt/splunk/etc/deployment-apps directory, I have the Splunk_TA_f5-bigip app with a lo... by jwalzerpitt Influencer in Deployment Architecture 01-28-2020 0 6	0	6
Why is collectd service is not sending data to splunk on Ubuntu 16? collectd service is not sending data to splunk on Ubuntu 16. Jan 28 08:07:10 cga2ubctd systemd[1]: Starting Statisti... by ad077 New Member in Deployment Architecture 01-28-2020 0 1	0	1