Deployment Architecture

Community Activity

Which forwarder version sloves the timestamp recognition of dates with two-digit years fails beginning January 1, 2020? We wonder which forwarder version solves this issue? We deployed the all_date_patch_props application to all the fo... by danielbb Motivator in Deployment Architecture 12-10-2019 0 3	0	3
SearchResultExecutorThread Hello everybody, I'm having trouble with Splunk Search Head on version 7.0.5 which is crashing sometimes, I show the... by geisontec New Member in Deployment Architecture 12-10-2019 0 0	0	0
Is it possible that Search Factor is Not Met and All Data is Searchable? The status of my Indexer Clustering-Master Node dashboard, All Data is Searchable and at the same time Search Factor ... by dolbyjoab Explorer in Deployment Architecture 12-09-2019 0 4	0	4
Example of how to monitor log volume trends? Does anyone have examples of how to use Splunk to monitor log volume trends? by sloshburch Ultra Champion in Deployment Architecture 12-09-2019 0 2	0	2
How can I track when a bucket gets frozen? Hello! I am trying to find a way to track when an index bucket rolls to Frozen. I've found the HotBucketRoller comp... by andrewtrobec Motivator in Deployment Architecture 12-09-2019 0 6	0	6
How to clean up a search head in a search head cluster? Hi Guys, It would be helpful if anyone shares knowledge/provide steps about cleaning up a search head in a search he... by sarahnazzar Explorer in Deployment Architecture 12-09-2019 0 5	0	5
Health warning - The percentage of small of buckets created (40) over the last hour is very high ... What does this warning mean and how does it impact the performance? The percentage of small of buckets created (40) ... by goran_epl Explorer in Deployment Architecture 12-08-2019 7 16	7	16
Issue with Applying Initial shcluster-bundle from Deployer I am having an issue where in when I attempt to run the apply shcluster-bundle command, as shown below, I am prompted... by richcboyer New Member in Deployment Architecture 12-08-2019 0 1	0	1
How to uninstall a disabled app - 'splunk_app_stream' I am looking into uninstalling a disabled Splunk app - 'splunk_app_stream' from the Splunk Cloud and would like to k... by nathant089 New Member in Deployment Architecture 12-08-2019 0 2	0	2
Is there a way to replicate field extractions across SH clusters? We have field extractions defined in one SH cluster and we would like to have them in the ITSI SH cluster. Any idea ... by danielbb Motivator in Deployment Architecture 12-06-2019 0 1	0	1
Splunk query to see Linux patching Hi , Our most of the splunk servers are Linux based systems , How can i create a splunk query to verify if Linux OS p... by Prakash493 Communicator in Deployment Architecture 12-06-2019 0 4	0	4
How to Utilize all core on heavy forwarder on windows os I have one Heavy forwarder where zip files are ingested and parsed and hardware specification of HF is 64 GB Ram and ... by ips_mandar Builder in Deployment Architecture 12-06-2019 0 3	0	3
Add standalone search head in existing sh cluster without conf configuration replication? Hello guys, is adding standalone search head in existing sh cluster without conf configuration replications supporte... by splunkreal Motivator in Deployment Architecture 12-06-2019 0 1	0	1
Splunk forwarder on Linux RHEL 7 Team, Does the splunk forwarder 6.4.4 supports on Linux RHEL 7 server? by manjunathaya New Member in Deployment Architecture 12-05-2019 0 1	0	1
Is there Splunk support for remaining 90 day data retention? We have Splunk Cloud deployed in our environment and we have set the default data retention that is 90 days. So for... by anandhalagaras1 Contributor in Deployment Architecture 12-05-2019 0 1	0	1
Backup Search Head cluster Hi, I would like backup a "search head" in one cluster (The folder splunk/etc/). The search head is under linux with... by NSOCC New Member in Deployment Architecture 12-04-2019 0 1	0	1
How much time is required to deploy Splunk solution for IIoT? Good day! Could you say, please, how many hours/days are approximatelly required to deploy Splunk solution for IIot (... by zintrok New Member in Deployment Architecture 12-04-2019 0 6	0	6
Linux Auditd app on list host as missing but finds IPs I am loading the Linux Auditd on cent o/s boxes. It works great with one box the others it finds them and shows me th... by wyomoose Engager in Deployment Architecture 12-03-2019 0 0	0	0
Duplicate index stanza in indexes.conf in a clustered environment Hello Splunkers, I have an indexes.conf file where i have a duplicate index stanza. If i remove one of them will it ... by Rob2520 Communicator in Deployment Architecture 12-03-2019 0 2	0	2
Whats the suggested way of licensing a test/development environment? Whats the suggested method to maintain a test/development environment in parallel to his production environment if th... by gebr Explorer in Deployment Architecture 12-03-2019 0 3	0	3
Restoring only selected indexes, backup best practices Hello. We are planning an upgrade from Splunk 7.2.1 to Splunk 8.0.x. For best practices, we'd like to back up our ind... by Branden Builder in Deployment Architecture 12-03-2019 0 2	0	2
Deploy indexes.conf in a Search Head Cluster? How to avoid (and recover in case of) misconfiguration? We have a Search Head Cluster connected to an Indexer Cluster. All indexes are on the clustered Indexers, and the Sea... by st4ple Path Finder in Deployment Architecture 12-03-2019 2 3	2	3
Retrieved missing data that was not forwarded when the splunk forwarder is stopped. Hello, There is a splunkforwarder that was stopped for a week without our knowledge and the data from that server wa... by pdantuuri0411 Explorer in Deployment Architecture 12-03-2019 1 12	1	12
Best practices Migrating from standalone indexers to a multisite indexer cluster and a search head cluster Hello, Actually, we have 6 indexers and 1 SH. We are migrating our platefrom to a multisite indexer cluster with 18 ... by Afef Communicator in Deployment Architecture 12-03-2019 1 14	1	14
Questions about migrating a single-site cluster to a multisite cluster Hey Guys, We are planning to migrate a single-site cluster to a multisite cluster. For converting single-site bucket... by bsrikanthreddy5 Path Finder in Deployment Architecture 12-02-2019 1 0	1	0