Deployment Architecture

Deployment Architecture
Community Activity
sagaraverma
We are planning to build an ACTIVE-ACTIVE multisite Splunk deployment, wherein each data center will have its own clu...
by sagaraverma Loves-to-Learn Everything in Deployment Architecture 11-22-2019
0 2
0
2
giorgiovolpini
HI, I have an environment with the following architecture: 2 Search Heads, 2 Idx, 1 Dep Server, 1 Cluster Master, 2 ...
by giorgiovolpini New Member in Deployment Architecture 11-22-2019
0 1
0
1
sat94541
Planning to use search head clustering and we need the ability to check search head cluster status by REST API call. ...
by sat94541 Communicator in Deployment Architecture 11-21-2019
2 4
2
4
fernandoandre
Question: How to configure Distributed Search Groups - distsearch.conf - on a Search head that run searches across bo...
by fernandoandre Communicator in Deployment Architecture 11-21-2019
4 2
4
2
sylim_splunk
Splunk start produces error below and stopped running. So far it failed on 2 servers in a row. Any suggestions? Fi...
by sylim_splunk Splunk Employee Splunk Employee in Deployment Architecture 11-20-2019
1 8
1
8
punkin413
Does Splunk monitor and alert on changes to servers (and potentially desktops) configurations?
by punkin413 New Member in Deployment Architecture 11-20-2019
0 1
0
1
vgothwal
Hi I want to understand is it possible to use 'defaultGroup' setting in the server.conf file. I can see in the docum...
by vgothwal New Member in Deployment Architecture 11-14-2019
0 4
0
4
cwilmoth
We have a 3 node indexer cluster with one search head. We have allowed another team to connect their search head to o...
by cwilmoth Path Finder in Deployment Architecture 11-13-2019
0 1
0
1
vaibhavagg2006
HI Experts I am having an issue in indexing the log file which gets rotated ever hour. The log file error.log gets ro...
by vaibhavagg2006 Communicator in Deployment Architecture 11-13-2019
0 1
0
1
petersob
Hello Community, have two simple questions about dealing with value ranges: 1) how to put ranges together? I have ...
by petersob Explorer in Deployment Architecture 11-13-2019
0 11
0
11
Ankitha_d
The splunk remove excess-buckets [index-name] command is not clearing all the excess buckets. Have tried to clear fro...
by Ankitha_d Path Finder in Deployment Architecture 11-11-2019
0 4
0
4
dperry
I have seen a question regarding this, but doesn't seem to explain much.....I'm looking to move multiple db_* to the ...
by dperry Communicator in Deployment Architecture 11-11-2019
0 7
0
7
alonsocaio
Is there any way to automatically roll buckets that are in the "Cannot fix search count as the bucket hasn't rolled y...
by alonsocaio Contributor in Deployment Architecture 11-11-2019
0 4
0
4
usd0872
We have 4 indexers in an index cluster, processing up to 400GB/d. Data volume is growing, thus we need more horse-pow...
by usd0872 Path Finder in Deployment Architecture 11-11-2019
0 3
0
3
ehqtrainorm
We have setup "enable boot-start" as the non-root user "splunk" and it's not systemd managed: /opt/splunk/bin/splunk ...
by ehqtrainorm Explorer in Deployment Architecture 11-10-2019
1 1
1
1
muizash
We had to stop an indexer and add new one into cluster. Splunk generally automatically handles bucket replication but...
by muizash Path Finder in Deployment Architecture 11-10-2019
0 2
0
2
mark_cet
Hi, I am looking for a way to add some forwarders / clients to a server class (serverclass.conf) by using the CLI / ...
by mark_cet Path Finder in Deployment Architecture 11-08-2019
0 2
0
2
dani9
A way to implement centralized management from web-GUI on SH of main configuration like forwarder, data retention, et...
by dani9 Explorer in Deployment Architecture 11-08-2019
0 2
0
2
saiganesh49
I have configured Smart Store on our Splunk cluster recently, after the changes, I was seeing 403 and 404 errors in...
by saiganesh49 Explorer in Deployment Architecture 11-07-2019
4 9
4
9
vikcee
Hello All, I have created a Indexer cluster. In my master indexer I created one Index and added some data (/etc/mast...
by vikcee Path Finder in Deployment Architecture 11-07-2019
0 3
0
3
neovenkat
We have search head cluster with 3 SHs. The search head replication factor is set to 2. We are facing an issue when ...
by neovenkat Explorer in Deployment Architecture 11-07-2019
0 1
0
1
gndivya
Is it possible to get the list of all indexes along with the userID who has created that index with the time of creat...
by gndivya Explorer in Deployment Architecture 11-07-2019
0 1
0
1
tsheets13
I would have thought this would be easy but I'm unsure how to do it. I had a very high cpu spike on one of the peers...
by tsheets13 Communicator in Deployment Architecture 11-06-2019
0 4
0
4
sarvesh_11
Hi Splunkers, I am configuring a new standalone search head, while configuration i am getting below warning,did my wo...
by sarvesh_11 Communicator in Deployment Architecture 11-06-2019
1 7
1
7
dantimola
I have 1000+ buckets to rebuild. Is the command xargs -i /opt/splunk/bin/splunk rebuild {} effective for rebuilding m...
by dantimola Communicator in Deployment Architecture 11-05-2019
3 2
3
2
Get Updates on the Splunk Community!

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap   From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology ...

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Long before a new capability reaches the keynote stage, it begins as an idea waiting to be tested. At ...