Deployment Architecture

Community Activity

How to put the search memory limit for a particular role? Hi, We are seeing high memory usage from certain set of people. We wanted to limit their search memory usage. Is it p... by saurabh0912 Path Finder in Deployment Architecture 10-27-2019 0 4	0	4
Splunk AMI in AWS (Beijing) Not working Hi Splunk Community, I'm trying to set up a splunk cluster in China (beijing) but the AMI (Splunk Enterprise ami ami... by ankugar New Member in Deployment Architecture 10-25-2019 0 0	0	0
Install Add-on for Unix and Linux I installed Splunk Add-on for Unix and linux on a single Splunk server environment for testing. However, each time I ... by ymzhangco New Member in Deployment Architecture 10-25-2019 0 4	0	4
Send Forwarder data from Splunk server as arguments Hello, We have a deployment App (modular Powershell) used on clients using the forwarder, I'm interested in passing ... by kuzkuz Explorer in Deployment Architecture 10-25-2019 0 2	0	2
How do I find corrupted buckets in a clustered environment? How do I find corrupted buckets in a clustered environment? by DerekB Splunk Employee in Deployment Architecture 10-24-2019 5 3	5	3
What should the replication and search factor be for a multi-site cluster? We have multi-site cluster, with four indexers on each site. I guess a replication factor of 2 is fine so each event ... by danielbb Motivator in Deployment Architecture 10-23-2019 0 4	0	4
What do we need to back-up in a multi-site cluster? We have a multi-site cluster with four indexers on each site and replication factor is at 2. When we back it up, is i... by danielbb Motivator in Deployment Architecture 10-23-2019 0 3	0	3
Deployment server with load balancer seating in front of two HFs Hi - I'd like to know if there is any issues when I add a new F5 load balancer in front of two HFs receiving apps upd... by vnguyen46 Contributor in Deployment Architecture 10-22-2019 0 4	0	4
Simple Splunk Lab Sizing I have setup Splunk free on a Ubuntu server VM in my home lab. The VM is setup with a 100gb disc. I would like to co... by mlines333 New Member in Deployment Architecture 10-22-2019 0 2	0	2
Migrating an index configuration from a single instance to an indexer cluster I have a custom index defined in apps/search/local/indexes.conf that receives data pretty much continuously. In mig... by brettcave Builder in Deployment Architecture 10-22-2019 0 3	0	3
How to retrieve host names from forwarder management I have two host names under clients in Forwarder management. I need to export these host names to a excel or csv so t... by kavyamohan Explorer in Deployment Architecture 10-22-2019 0 3	0	3
How forwarder is sending data to indexers? Sudden error in 1 forwarder. Actually there were some problems with one of the UF sending data to our indexers suddenly, therefore we had to resta... by muizash Path Finder in Deployment Architecture 10-21-2019 0 3	0	3
maximum number of buckets in a multisite indexer cluster I have a million dollar question I have a customer with > 200 TB daily ingestion of data and they have a multisite cl... by epeeran Observer in Deployment Architecture 10-21-2019 0 0	0	0
"Bundle validation is in progress" from SplunkCloud instance when creating indexes via the API When creating a series of indexes via url /services/cluster_blaster_indexes/sh_indexes_manager, receiving the above e... by crawdaddy115 New Member in Deployment Architecture 10-21-2019 0 0	0	0
Search Head Cluster 7.1 presents status_line="Error connecting: Connect Timeout" socket_error="Connect Timeout" frequently The cluster is running on 7.1.6 for months but in the last weeks we are seeing more and more errors like: 08-11-2019... by pedroponchio Explorer in Deployment Architecture 10-21-2019 0 1	0	1
how to assign data to an index? I have data from different sources already forwarded to a forwarders. Indexes already created on a deployment-master ... by vnguyen46 Contributor in Deployment Architecture 10-21-2019 0 6	0	6
How to forward logs from syslog server to splunk so that it is recognizable via their sourcetype? eg. I have many logs forwarded to the syslog server. I intend to install a universal forwarder on that syslog server... by tan_junyuan Engager in Deployment Architecture 10-21-2019 0 2	0	2
Is there a maximum time frame for cold and frozen buckets? I've searched through the docs to find out if there is a max setting in splunk for the bucket retention policy and I ... by mcirrici Explorer in Deployment Architecture 10-20-2019 0 3	0	3
How to consider my server acts as a Heavy Forwarder Hi Team, We have Splunk Cloud deployed in our environment and we have built an heavy forwarder server. And here we h... by anandhalagarasa Path Finder in Deployment Architecture 10-18-2019 0 1	0	1
Turn-off Muster Node/License Master/Deployer Machine Hello everyone, i'm actually dealing with an infrastructure composed by three search heads, two indexer and a single... by LM_ACN Engager in Deployment Architecture 10-18-2019 0 2	0	2
How can I move one index data from production to test environment for testing purpose? I have single instance test environment. How can I move one index data from productio to test environment for testing... by riqbal47010 Path Finder in Deployment Architecture 10-17-2019 0 2	0	2
Understanding forwarding, filtering and license consumption Hello. I've inherited a 'proof-of-concept' Splunk installation consisting of several linux servers running Splunk Ent... by wemb Explorer in Deployment Architecture 10-16-2019 0 5	0	5
unable to start splunkforwarder from services.msc 1067 error -- Build - 6.0.3 windows could not start splunkforwarder service on local computer error - 1067 - The process terminated unexpectedly... by dipinp New Member in Deployment Architecture 10-16-2019 0 3	0	3
HF and deployment server Dear All, We are adding one HF more HF to our system and planning to build Deployment server as well. So we have 3 H... by santosh11 New Member in Deployment Architecture 10-16-2019 0 2	0	2
How to connect search head to new indexer in a distributed environment (beginner here) Hi all, Currently, our Splunk dev environment consists of a standalone instance that is both our indexer and search ... by maxguttsait New Member in Deployment Architecture 10-15-2019 0 2	0	2