Deployment Architecture

Community Activity

How to deal with value ranges? Hello Community, have two simple questions about dealing with value ranges: 1) how to put ranges together? I have ... by petersob Explorer in Deployment Architecture 11-13-2019 0 11	0	11
Why is the "splunk remove excess-buckets [index-name]" command not working (GUI or CLI) in our multisite indexer cluster? The splunk remove excess-buckets [index-name] command is not clearing all the excess buckets. Have tried to clear fro... by Ankitha_d Path Finder in Deployment Architecture 11-11-2019 0 4	0	4
How to thaw multiple DB within the Frozen bucket? I have seen a question regarding this, but doesn't seem to explain much.....I'm looking to move multiple db_* to the ... by dperry Communicator in Deployment Architecture 11-11-2019 0 7	0	7
Roll buckets that are in "Cannot fix search count as the bucket hasn't rolled yet" state Is there any way to automatically roll buckets that are in the "Cannot fix search count as the bucket hasn't rolled y... by alonsocaio Contributor in Deployment Architecture 11-11-2019 0 4	0	4
What kind of performance gain by moving from SAN to local storage? We have 4 indexers in an index cluster, processing up to 400GB/d. Data volume is growing, thus we need more horse-pow... by usd0872 Path Finder in Deployment Architecture 11-11-2019 0 3	0	3
Centos 7 - Splunk 7.4.2 - Enable/Disable boot start - issues as non-root user We have setup "enable boot-start" as the non-root user "splunk" and it's not systemd managed: /opt/splunk/bin/splunk ... by ehqtrainorm Explorer in Deployment Architecture 11-10-2019 1 1	1	1
Bucket fixup tasks(pending). Fixup reason = "Received shutdown notification from peer" We had to stop an indexer and add new one into cluster. Splunk generally automatically handles bucket replication but... by muizash Path Finder in Deployment Architecture 11-10-2019 0 2	0	2
Can a forwarder be added to the serverclass.conf file using the CLI / command line? Hi, I am looking for a way to add some forwarders / clients to a server class (serverclass.conf) by using the CLI / ... by mark_cet Path Finder in Deployment Architecture 11-08-2019 0 2	0	2
Centralized management A way to implement centralized management from web-GUI on SH of main configuration like forwarder, data retention, et... by dani9 Explorer in Deployment Architecture 11-08-2019 0 2	0	2
Splunk Smartstore: Remote Storage Http Error Status Codes I have configured Smart Store on our Splunk cluster recently, after the changes, I was seeing 403 and 404 errors in... by saiganesh49 Explorer in Deployment Architecture 11-07-2019 4 9	4	9
Need help in Replication. Hello All, I have created a Indexer cluster. In my master indexer I created one Index and added some data (/etc/mast... by vikcee Path Finder in Deployment Architecture 11-07-2019 0 3	0	3
Search head clustering We have search head cluster with 3 SHs. The search head replication factor is set to 2. We are facing an issue when ... by neovenkat Explorer in Deployment Architecture 11-07-2019 0 1	0	1
How to get the details of index name and who has created it ? Is it possible to get the list of all indexes along with the userID who has created that index with the time of creat... by gndivya Explorer in Deployment Architecture 11-07-2019 0 1	0	1
What was running at xx:xx I would have thought this would be easy but I'm unsure how to do it. I had a very high cpu spike on one of the peers... by tsheets13 Communicator in Deployment Architecture 11-06-2019 0 4	0	4
Searchhead is unable to update the peer information. Error = 'Unable to reach master' Hi Splunkers, I am configuring a new standalone search head, while configuration i am getting below warning,did my wo... by sarvesh_11 Communicator in Deployment Architecture 11-06-2019 1 7	1	7
Is it possible to rebuild multiple buckets with this command in the thawed directory? I have 1000+ buckets to rebuild. Is the command xargs -i /opt/splunk/bin/splunk rebuild {} effective for rebuilding m... by dantimola Communicator in Deployment Architecture 11-05-2019 3 2	3	2
multisite RF & SF are not correctly representing in master UI I setup one multisite with the following server.conf [clustering] available_sites = site1,site2,site3 mode = master ... by mchang_splunk Splunk Employee in Deployment Architecture 11-05-2019 0 1	0	1
Splunk Forwarder - timestamp switched!!! Splunk Forwarder 7.0.2 (Windows 64 bit) Splunk Enterprise 7.0.0 (Linux) The strange problem: until 31/10, Europe TZ,... by verbal_666 Builder in Deployment Architecture 11-05-2019 0 7	0	7
pass username and password while search head cluster restart We are using a Search Head cluster Splunk Enterprise Version: 7.2.6 When the CPU and Memory of servers goes high we ... by vikram_m Path Finder in Deployment Architecture 11-05-2019 0 1	0	1
Index over-consumption of Disk Hi all, I noticed my Splunk instance wasn't indexing data this afternoon. I looked at the server and one of the disk... by GaryChan1 Engager in Deployment Architecture 11-04-2019 0 5	0	5
Why is the deployer removing my search head apps after applying new apps? I have 3 search heads with an app foldername searchbaseapp. After using apply bundle on my deployer with my shclust... by paxsonkoh New Member in Deployment Architecture 11-04-2019 0 3	0	3
Can I reuse the license if I delete it from my current splunk server? I have installed a 50GB renewal license in wrong splunk server (Now the capacity is increased from 20 GB to 70GB) Can... by jigli New Member in Deployment Architecture 11-04-2019 0 1	0	1
Why is the deployment server unable to push apps to search head clusters? Hello !! I have created multiple apps under $SPLUNK_HOME/etc/shcluster/apps/ on the deployment server and checked th... by vgollapudi Communicator in Deployment Architecture 11-03-2019 0 18	0	18
How to replicate index to all the slave indexers? I have created a 5 node index cluster and its working fine. Now I created an index in master indexer and added some d... by vikcee Path Finder in Deployment Architecture 11-02-2019 1 1	1	1
Does not start splunk forwarder service I have installed splunk forwarder for a windows servers and the service must be initialized when the server starts bu... by paola92 Explorer in Deployment Architecture 11-02-2019 0 2	0	2