Deployment Architecture

Community Activity

Can write_splunk collectd plugin be configured to send to multiple UDP ports? I'd like to leverage collectd to gather not just metrics for SAI but also statsd data from custom apps. I'm using the... by vcarbona Path Finder in Deployment Architecture 10-14-2019 0 0	0	0
Automatic Index Creation on Indexer Hi, I have a use case where we want build trust between app server and Splunk indexer such that whenever there is po... by rashi83 Path Finder in Deployment Architecture 10-12-2019 0 2	0	2
Install apps for into the deployment-apps directory for deployment? All, Is there an app or utility so I can from the forwarder manager UI upload apps into the Deployment-apps directo... by daniel333 Builder in Deployment Architecture 10-12-2019 0 2	0	2
How to run exe files when deployed apps. Hi Splunkers, after you create and deploy an app. After you complete the deployment process, I want to run "myapps/... by burakatabay Path Finder in Deployment Architecture 10-11-2019 0 2	0	2
Splunk 7.3: Does an unavailable License Master still mean no searching is available? Hi everyone, According to the latest documentation: https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Typesof... by perditi0nspam Engager in Deployment Architecture 10-11-2019 0 4	0	4
Migration instructions from single install to distributed? Hi I have a single install (Everything on one machine). I want to go to one search head and 2 indexers (non clustere... by robertlynch2020 Influencer in Deployment Architecture 10-11-2019 1 10	1	10
is there a way to import local changes on SHC peers' apps back to the deployer? Dear comunity, I would like to maintain the search peers' status of every app in the deployer, and not on search pee... by sonny_monti Path Finder in Deployment Architecture 10-11-2019 0 3	0	3
How do I disable admon, netmon, powershell etc scripts running on Windows UF 6.3.1 I'm not wanting to monitor these events and yet the scripts still run every minute (by looking at the task manager). ... by marksnelling Communicator in Deployment Architecture 10-10-2019 1 11	1	11
Multiple sourcetypes and listenners on the same udp port. I have some questions concerning a Splunk deployment i'm working on, we have a single Splunk instance and we want to ... by foufoumad New Member in Deployment Architecture 10-10-2019 0 2	0	2
Can we forward the data using forwarder to indexer in splunk trail version? I have installled the Splunk free trail version and want to forward data from other server using splunk forwarder. Is... by sachinbansal New Member in Deployment Architecture 10-08-2019 0 3	0	3
migrating from single server to indexer cluster with replicated data i know this has been asked before, such as https://answers.splunk.com/answers/432048/is-there-a-way-to-migrate-indexe... by brettcave Builder in Deployment Architecture 10-08-2019 0 2	0	2
How do you restart splunk? How do you restart splunk? (originally a response to https://answers.splunk.com/answers/386613/how-do-i-reset-the-pa... by richgalloway SplunkTrust in Deployment Architecture 10-07-2019 0 4	0	4
Deployment Server Performance Reference Hi, Splunkers: About a week ago, a customer asked me that is there a reference for deployment server which has 1200+... by aojie654 Path Finder in Deployment Architecture 10-07-2019 0 1	0	1
Avoid indexing same file multiple times batch input I have batch input [batch://C:\abc\*.zip] move_policy = sinkhole index = xyz host_segment = 2 crcSalt = <SOURCE> sou... by ips_mandar Builder in Deployment Architecture 10-06-2019 0 4	0	4
Splunk shcluster configuration on master not updating config I am trying to configure a master node in a splunk cluster to be an indexer master and shc deployer. I install Splunk... by brettcave Builder in Deployment Architecture 10-06-2019 0 7	0	7
Events in Index are Getting Duplicated Even Though They're Exactly The Same I've been reading around the docs and other questions, and from what I can tell, Splunk is supposed to be taking an M... by bmw417 New Member in Deployment Architecture 10-06-2019 0 2	0	2
Backup of splunk Indexes in amazon S3 bucket in splunk 7.x Hi All, I am using splunk enterprise version 7.1. I am looking for a way to backup the splunk index data into Amazon... by naagaraj Engager in Deployment Architecture 10-04-2019 0 1	0	1
(unfortunately) My Splunk server is on Windows.. but I need to monitor linux servers I have single windows server running Splunk enterprise, and I have a Linux server with the universal forwarder instal... by rileyken Explorer in Deployment Architecture 10-04-2019 0 4	0	4
I can access every search head web page except for the captain I've got a search head cluster running and have a host that I've set as the cluster captain. Other than the configur... by scottj1y Path Finder in Deployment Architecture 10-03-2019 0 4	0	4
To make a indexer report to indexer cluster master Our indexer cluster master has 2 indexers, one has stopped reporting The indexer which was reporting to indexer clus... by VijaySrrie Builder in Deployment Architecture 10-03-2019 0 2	0	2
Splunk Search Query for Logged-in Users on Linux Servers What is the splunk Search Query for Logged-in Users on Linux Servers I want to have dashboard for currently logged i... by umesh_phendarka New Member in Deployment Architecture 10-02-2019 0 2	0	2
How to migrate two linux indexers into one I am looking into simplifying my Splunk architecture. I currently have two Linux indexers in different regions. They... by jonringler Engager in Deployment Architecture 10-02-2019 1 1	1	1
Deployment Clients can't check in to Deployment Server All, I have gone through all the related threads here but I can't find a possible solution to my version of this is... by Olamide22 Explorer in Deployment Architecture 10-02-2019 0 4	0	4
A single forwarder has multiple GUIDs Splunk v7 On the forwarder management, I was missing a client (which is indexing data and showing in search as well) That same ... by agarws8 New Member in Deployment Architecture 10-01-2019 0 1	0	1
single logfile in local splunk server how to apply a multiple source type in splunk? my local splunk master having a ossim_alarms.log file my requirement is that file to apply a multiple souretype by zippyopsadmin New Member in Deployment Architecture 10-01-2019 0 1	0	1