Deployment Architecture

Community Activity

How to migrate two linux indexers into one I am looking into simplifying my Splunk architecture. I currently have two Linux indexers in different regions. They... by jonringler Engager in Deployment Architecture 10-02-2019 1 1	1	1
Deployment Clients can't check in to Deployment Server All, I have gone through all the related threads here but I can't find a possible solution to my version of this is... by Olamide22 Explorer in Deployment Architecture 10-02-2019 0 4	0	4
A single forwarder has multiple GUIDs Splunk v7 On the forwarder management, I was missing a client (which is indexing data and showing in search as well) That same ... by agarws8 New Member in Deployment Architecture 10-01-2019 0 1	0	1
single logfile in local splunk server how to apply a multiple source type in splunk? my local splunk master having a ossim_alarms.log file my requirement is that file to apply a multiple souretype by zippyopsadmin New Member in Deployment Architecture 10-01-2019 0 1	0	1
How to update datamodels on a distributed system Hi I have one search head and two indexers (Non-Clustered). So how do I update data models? (E.G new Field, update ... by robertlynch2020 Influencer in Deployment Architecture 10-01-2019 0 5	0	5
"Problem replicating config (bundle) to search peer...timed out; exceeded 60 sec" How do I resolve this error? Problem replicating config (bundle) to search peer '10.215.3.196:8089',Reading reply to upload: rv=-2, Receive from=h... by kaskirana01 New Member in Deployment Architecture 09-30-2019 0 2	0	2
How does indexer cluster replication affect license usage? For about a week, two of our indexers were not replicating to their slaves - oddly this reduced our license usage by ... by geoppspl7 Explorer in Deployment Architecture 09-29-2019 1 7	1	7
Missing events after network disruption We have a index cluster with 10+ indexers running on Splunk version 6.6.1. Some of the indexed events suddenly went m... by thol Explorer in Deployment Architecture 09-27-2019 0 2	0	2
How many indexers do I need in my Splunk deployment? Does anyone have any good resources about indexes and index management? Before I set up a bunch of indexes, I'd like... by adukes_splunk Splunk Employee in Deployment Architecture 09-26-2019 0 3	0	3
Number of Index's to Host or Events We are just starting to really dive into some more in depth reports. In some cases we are seeing some slow run times;... by aohls Contributor in Deployment Architecture 09-26-2019 0 4	0	4
Should we use deployment server for forwarders with index clustering? Hi, Suppose we have index clustering implemented so can we use deployment server for forwarders? Regards, Sachin by sachinbansal New Member in Deployment Architecture 09-25-2019 0 4	0	4
Can I use forwarders to scale my Splunk Cloud deployment? Where can I find more information about using forwarders to manage my Splunk Cloud deployment? by adukes_splunk Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
Can I use configuration files to extend the power of Splunk Enterprise? Does anyone know where I can find guidance about editing configuration files? by adukes_splunk Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
Hot, warm to colddb movement The method is which I can use (hot, warm db) for 1 year and I move to the cold db from this or greater? Description: ... by khyoung7410 Communicator in Deployment Architecture 09-25-2019 1 6	1	6
Do you have any guidance about how to revitalize a Splunk Enterprise/Splunk Cloud deployment that's stuck on autopilot? I have a Splunk Enterprise/Splunk Cloud deployment that's been on autopilot for a while. We've been adding data sourc... by jmulcaster_splu Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
App from single-instance to distributed deployment architecture. Hi, I already have splunk app (used splunk JDK for development) which runs fine on single-instance splunk. I want t... by ajain_mi Explorer in Deployment Architecture 09-24-2019 0 3	0	3
Under what configuration file and stanza do I configure CMConfig - multisite=[true\|false]? Every 5 seconds on my deployment server (in a clustered environment), I get this in splunkd.log: WARN CMConfig - mu... by dave_maclean Explorer in Deployment Architecture 09-24-2019 3 5	3	5
distributed search query works (kinda) but only returns single Hi, We have 10 sites each with their own splunk server (search head, indexer etc). Each is collecting the same infor... by sdewar83 Path Finder in Deployment Architecture 09-23-2019 0 3	0	3
Search Head Performance verification for high load of users We have a dashboard with 12 Panels from different sources, and each panel is powered by summary index. As of now, the... by pgadhari Builder in Deployment Architecture 09-22-2019 0 6	0	6
Deploymentserver behind AWS Loadbalancer - How to get original Client IPs? Hello, any idea how to get original client ip address of forwarder which are connected to a deploymentserver via an A... by Paul1896 Path Finder in Deployment Architecture 09-19-2019 0 0	0	0
What is the best action plan during hardware/firmware maintenance of a Splunk Linux server? We have 8 Splunk indexers in our environment (2 sites). One indexer server needs to be serviced: update the BIOS, RA... by mlevsh Builder in Deployment Architecture 09-19-2019 0 6	0	6
How to point forwarders to new Splunk instance We went through an acquisition and both of us have Splunk instances. We want to migrate from our Splunk Cloud instanc... by erinbwest New Member in Deployment Architecture 09-18-2019 0 3	0	3
deployment server clients not showing up Hello, When I view the deployment clients under forwarder management, not all my clients are being displayed. Ever... by dglass0215 Path Finder in Deployment Architecture 09-18-2019 0 4	0	4
Splunk Index storage configurations Hi , We are building a new Splunk infrastructure in which daily 300 GB data will be ingested, we are running with 2 ... by nnimbe1 Path Finder in Deployment Architecture 09-17-2019 0 0	0	0
splunk app for infrastructure status inactive but getting metrics (linux) Hi, help me figure it out. I connected the servers to the splunk app for infrastructure using collectd, the write spl... by bot97 Engager in Deployment Architecture 09-16-2019 0 1	0	1