Deployment Architecture

Community Activity

Deployer sends restart with /opt/splunk/bin/splunk restart, systemctl loses status When the deployer sends a restart with /opt/splunk/bin/splunk restart, that changes the value I get with systemctl st... by ronlevytn Engager in Deployment Architecture 12-31-2019 1 1	1	1
Splunkforwarder 7.3.3 linux enable boot-start bug What is the point of the "splunk enable boot-start" enabling then immediately disabling the service at boot-start? c... by janglin Explorer in Deployment Architecture 12-31-2019 0 5	0	5
Splunk 7.2.3 Deployment Server Automatic splunkforwarder restart Hi all, we are experiencing problem with the Deployment Server after the 7.2.3 release. The Universal Forwarder is in... by davidemagni Explorer in Deployment Architecture 12-31-2019 0 1	0	1
How can I check whether the data is being forwarded to indexer How can I check whether the data from a server is being forwarded to indexer. by pratapa Explorer in Deployment Architecture 12-31-2019 0 3	0	3
Best practice to deploy client apps to Splunk servers? What are the detailed steps to deploy client apps (mainly inputs.conf) to Splunk servers (indexers, SHs, deployment s... by mitag Contributor in Deployment Architecture 12-30-2019 0 7	0	7
Can we list the hot buckets? With all the discussions about smartstore here, there is some sort of treatment of the hot buckets mechanism as a coh... by danielbb Motivator in Deployment Architecture 12-27-2019 0 3	0	3
important port numbers for Fundamental 1 Hello, I know the following port numbers for Splunk, please let me know if I need anything more to remember. splunk w... by palisetty Communicator in Deployment Architecture 12-27-2019 0 1	0	1
What is the process and the effect of changing the `shcluster_label` parameter in `server.conf` in a search head cluster (SHC)? If there is a SHC whose shcluster_label is my_old_shc and I want to change it to my_new_shc, how would I change it so... by vzedbny Engager in Deployment Architecture 12-26-2019 0 1	0	1
Can I request/purchase additional Development/QA Search Heads/Environments in Splunk Cloud? The idea: Perform Splunk development in a non-prod instance as to not impact production searches/alerts/dashboards, a... by bandit Motivator in Deployment Architecture 12-20-2019 0 4	0	4
Is it possible to tell if users are online before reboot? Is it possible to query for online users via CLI, not through SPL? I reboot frequently and want my reboot shell scrip... by nick405060 Motivator in Deployment Architecture 12-18-2019 0 3	0	3
Splunk Standalone Instance - Is clustering available for high availability> Hi, We have a single standalone Splunk instance used for indexing, searching and alerts. We want to have high availa... by smcdonald20 Path Finder in Deployment Architecture 12-18-2019 0 5	0	5
Why were my triggered alerts cleared after restart? part II We see the same behavior as described at Why were my triggered alerts cleared after restart? Is there a way around i... by danielbb Motivator in Deployment Architecture 12-18-2019 0 0	0	0
Duplicating Events without license impact Guys, I have Splunk Enterprise 6.1.4 (don't ask why I haven't upgraded. I have my reasons !). I have several forwarde... by shocko Contributor in Deployment Architecture 12-17-2019 0 3	0	3
Upgrade Splunk Enterprise in Linux Hi Splunk Team! I have upgrade Splunk enterprise ver 7.3.1.1 to splunk enterprise 8.0.0 the installed all done don't ... by vssvietnam New Member in Deployment Architecture 12-16-2019 0 3	0	3
Could not send data to output queue (parsingQueue) and also logs getting delay Hi Team, we are recieving error like "Could not send data to output queue (parsingQueue), retrying..." in splunkd lo... by shaikhussain2 Explorer in Deployment Architecture 12-13-2019 0 2	0	2
Data truncated to 100kb only I have edited the props.conf file of the indexer and UF to the following: [sourcetype] TRUNCATE=0 MAX_EVENTS=10000 ... by mufthmu Path Finder in Deployment Architecture 12-13-2019 0 3	0	3
Splunk Enterprise 8.0 and Ubuntu 18.04 - can't access the UI I have successfully installed Splunk Enterprise on Ubuntu 18.04. But I can't access the UI at all. Splunk is running... by rwellum Explorer in Deployment Architecture 12-13-2019 0 4	0	4
Splunk on Azure, which is the forwarder to use? My client has purchased Splunk Azure licenses and we are about to implement the same. As this is the first time I am ... by prashanthgoutha New Member in Deployment Architecture 12-13-2019 0 2	0	2
Universal Forwarder I am having Splunk self-service cloud deployment and trying to install the UF(Universal forwarder). After installing ... by rajiv_r Explorer in Deployment Architecture 12-13-2019 0 2	0	2
Slow web UI in Search Head cluster Hey, My SH cluster web UI is very slow when approaching several management pages, such as Views, Lookups definition ... by omerl Path Finder in Deployment Architecture 12-12-2019 0 0	0	0
How to search for Windows host with UF agent installed and push datetime.xml fix app? Hello Everyone - as we may all be aware of the date and time recognition issue in Splunk. I am looking a way to gathe... by vnguyen46 Contributor in Deployment Architecture 12-12-2019 0 5	0	5
copy data from a server to backup server Hi all I have problem in during copy all file from splunk server to backup server. I want to backup any (configure a... by HoangSon New Member in Deployment Architecture 12-12-2019 0 5	0	5
Clarification on SH Cluster replication I have setup a SH cluster with 5 node the no replication factor (default 3), i am using a single URL to access the S... by pallabtheartist New Member in Deployment Architecture 12-12-2019 0 2	0	2
Hotwarm to Cold to Frozen Hi All, I have a clustered env, rep factor 3 , search factor 2. my current index.conf looks like: #replicate all ... by amankhan1 Path Finder in Deployment Architecture 12-12-2019 0 5	0	5
Problem with SAML cert: "ERROR UiSAML - Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert :/opt/splunk/etc/auth/idpCerts/idpCert.pem" Problem: After setting up SAML configuration, when logging into the UI you are presented with the following error al... by rphillips_splk Splunk Employee in Deployment Architecture 12-12-2019 1 8	1	8