Deployment Architecture

Community Activity

Splunk on Kubernetes - replication constraints Hi, i am running Splunk on Kubernetes with SmartStore. In order to increase node CPU/memory utilization, I have coll... by sscharma New Member in Deployment Architecture 01-29-2020 0 1	0	1
Cold to Frozen buckets question Hi @All, I will explain my situation now: On my Splunk Enterprise (7.2.6) environment I have configured the option C... by paccio84 New Member in Deployment Architecture 01-29-2020 0 1	0	1
How to set a new pass4SymmKey password on a search head cluster deployer? Hello, We have a Search head cluster in our environment and the person who set up the Deployer initially forgot the ... by Raghav2384 Motivator in Deployment Architecture 01-28-2020 1 12	1	12
Migrating files from etc/system to slave-apps in cluster Hi, i was running a single indexer which has props / transforms in etc/system/local. The indexer was migrated to an ... by brettcave Builder in Deployment Architecture 01-28-2020 0 1	0	1
Deployment Server - local folder not being pushed to Search Head cluster On my Deployment server in the /opt/splunk/etc/deployment-apps directory, I have the Splunk_TA_f5-bigip app with a lo... by jwalzerpitt Influencer in Deployment Architecture 01-28-2020 0 6	0	6
Why is collectd service is not sending data to splunk on Ubuntu 16? collectd service is not sending data to splunk on Ubuntu 16. Jan 28 08:07:10 cga2ubctd systemd[1]: Starting Statisti... by ad077 New Member in Deployment Architecture 01-28-2020 0 1	0	1
Distributed Tracing View Hi All, We have logs from IIS Servers and application service k8s pod logs which details TraceId, SpanId and parent... by sandyuce New Member in Deployment Architecture 01-27-2020 0 0	0	0
The average load on our linux heavyforwarder is around 20, what can I do to reduce it and will increasing core count help in ways ? The average load on our linux heavyforwarder is around 20. what can i do to reduce it and will increasing core count... by srampally Path Finder in Deployment Architecture 01-27-2020 0 1	0	1
Multi-site architecture - Is it possible to set different retention timeframes for the same index at two different sites? In the multi-site architecture models, it is not clear what settings on retention are available to you. Is it possib... by sail4lot Path Finder in Deployment Architecture 01-27-2020 0 1	0	1
How to create a splunk query that will list the applications on the members of the search head cluster? i need a splunk query that will the list the applications on each member of the search head cluster. i am running th... by pc1234 Explorer in Deployment Architecture 01-26-2020 0 1	0	1
Can we administer the serverclass.conf via the UI only? Yesterday I saw the following within serverclass.conf - [serverClass:<name>] whitelist.0 = <server1>.<domain>.com w... by danielbb Motivator in Deployment Architecture 01-24-2020 0 3	0	3
timechart span not working index="myindex" cluster="mycluster" http_request="/" \| bucket _time span=5m \| timechart count by x_forwarded_for useo... by zachsisinst Explorer in Deployment Architecture 01-23-2020 0 3	0	3
Whats the best practice to manage app deployment on non-clustered indexers managed by deployment server ? Everytime I do splunk reload deploy-server, it restarts both the Indexers (which are being managed by DS), which is ... by damode Motivator in Deployment Architecture 01-23-2020 0 2	0	2
How to run a linux command on remote machine via splunk GUI, on demand only? I have splunk instance running on one linux server. I have python code on another linux server, which I run manually ... by smitapatankarso Explorer in Deployment Architecture 01-23-2020 0 2	0	2
Distsearch.conf in system/local modified after i push any app from deployer to SHC Distsearch.conf in system/local modified after i push any app from deployer to SHC. Not sure why? why it is modified?... by vishaltaneja070 Motivator in Deployment Architecture 01-22-2020 0 0	0	0
How do I empty an index in an indexer cluster Clients wanted a change in how there data was displayed using the sourcetype they first used. How do I remove all of... by nls7010 Path Finder in Deployment Architecture 01-22-2020 0 2	0	2
Data rebalancing is not working Hi guys, We tried data rebalancing. But nothing happens. We are forwarding data from universal forwarder using clus... by sudhir7 Explorer in Deployment Architecture 01-21-2020 1 1	1	1
Enterprise Trial license: does it include clustering? We are using Enterprise Trial License in our test environment so we just want to know whether we are able to create m... by anandhalagarasa Path Finder in Deployment Architecture 01-21-2020 1 9	1	9
Adding a new indexer to the indexer cluster Can I please know the process of adding a new indexer to the indexer cluster ? Should the cluster be kept in mainte... by nawazns5038 Builder in Deployment Architecture 01-20-2020 1 6	1	6
How to extract time from bash_history # timestamp? I'm dealing with bash_history files in the following format. I would like to extract the timestamp and use that as th... by peterm30 Path Finder in Deployment Architecture 01-19-2020 0 13	0	13
external account unsuccessful attempts to authenticate to multiple hosts Any help figuring out how to design a query for this would be helpful. by jshael New Member in Deployment Architecture 01-19-2020 0 2	0	2
Listing all directories aka sources for unix server How can we check which directories are being indexed for Unix server in Splunk? by bsaujla131984 Path Finder in Deployment Architecture 01-18-2020 0 4	0	4
setup.xml not supported on search head cluster? I've built a modular alert with a setup.xml to create credentials on the storage/passwords endpoint and to store a se... by mmarkleybac Engager in Deployment Architecture 01-17-2020 0 2	0	2
Chronology of Splunk Deployment I need to build Splunk Distributed Environment, how should i configure the different components. I have License/Clust... by sarwshai Communicator in Deployment Architecture 01-17-2020 0 6	0	6
Max Value for bucket ID I haven't been able to find this in the docs. The bucket ID is the last number in the name of a bucket directory. For... by reed_kelly Contributor in Deployment Architecture 01-15-2020 5 5	5	5