Deployment Architecture

Deployment Architecture
Community Activity
HyunHo
I am referencing the following to create a custom command.https://github.com/splunk/splunk-app-examples/tree/master/c...
by HyunHo Engager in Deployment Architecture 01-15-2025
0 0
0
0
danielbb
I have an indexer, a search head, and a heavy forwarder for a small installation. How do I configure them to communic...
by danielbb Motivator in Deployment Architecture 01-15-2025
0 5
0
5
Richy_s
Hi,I have a requirement to mask any sensitive data, such as credit card numbers or Social Security Numbers, that migh...
by Richy_s Path Finder in Deployment Architecture 01-15-2025
0 7
0
7
danielbb
We see the following on the server via the ss -tulpn tcp LISTEN 0 128 ...
by danielbb Motivator in Deployment Architecture 01-14-2025
0 4
0
4
arusoft
What is the fastest way to migrate Splunk objects dashboard , alerts, reports from one of these old version ( 6.5, 7)...
by arusoft Communicator in Deployment Architecture 01-14-2025
0 1
0
1
danielbb
I'm in the process of creating a small Splunk installation and I would like to know from where I would download the s...
by danielbb Motivator in Deployment Architecture 01-14-2025
0 5
0
5
mdwecht
Hello,Can someone please provide the eksctl command line or command line in combination with a cluster config file th...
by mdwecht Path Finder in Deployment Architecture 01-14-2025
0 0
0
0
hypePG
Hey everybody, I am trying to set up a mix of multisite and single-site indexer cluster in an splunk enterprise envir...
by hypePG Path Finder in Deployment Architecture 01-11-2025
0 6
0
6
mohsplunking
Hello Splunkers,I need some help to understand what will be the minimum spects required for Splunk Enterprise Install...
by mohsplunking Path Finder in Deployment Architecture 01-10-2025
0 2
0
2
lal37
Hi Team, Any one please let me know what is the compression ratio of raw data in Splunk? I heared that its 10:1 rati...
by lal37 Explorer in Deployment Architecture 01-08-2025
1 7
1
7
Ajinkya1992
Hi Team, I have doubt with Splunk Storage Sizing apps https://splunk-sizing.appspot.com/#ar=0&c=1&cf=0.15&cr=180&hwr=...
by Ajinkya1992 Path Finder in Deployment Architecture 01-08-2025
0 3
0
3
Chirag812
I need to upgrade the Splunk Universal forwarder version to all the existing installed windows 2016 and 2019 servers....
by Chirag812 Explorer in Deployment Architecture 01-08-2025
0 2
0
2
jpillai
We are planning to upgrade our Splunk hardware. We currently have below(multisite indexer cluster with independant se...
by jpillai Path Finder in Deployment Architecture 01-07-2025
0 3
0
3
aDevOpsPerson
We have a 5 node Splunk forwarder cluster to handle throughput of multiple servers in our datacenter.  Currently our ...
by aDevOpsPerson Engager in Deployment Architecture 01-03-2025
0 1
0
1
danielbb
We are creating an installation of one indexer, one search head, and one universal forwarder with syslog, and I wonde...
by danielbb Motivator in Deployment Architecture 01-03-2025
0 7
0
7
danielbb
We are about to create new VMs with the Ubuntu OS. Which version of Ubuntu is supported and recommended? 
by danielbb Motivator in Deployment Architecture 01-03-2025
0 6
0
6
BRFZ
Hello,I have a distributed Splunk architecture with a single search head, two indexers, and management tier : License...
by BRFZ Communicator in Deployment Architecture 01-02-2025
0 21
0
21
yin_guan
Hello evereone I encountered an issue, as shown in the image. I can see two machines in the MC's forwarder dashboard,...
by yin_guan Explorer in Deployment Architecture 12-31-2024
0 8
0
8
BRFZ
Hello Splunk Community,I am working on the configuration of a distributed Splunk deployment, and I need clarification...
by BRFZ Communicator in Deployment Architecture 12-24-2024
0 1
0
1
zksvc
Hi Everyone, I was create my own lab for learning to configure best practice for Windows. Then i create 1 Windows VM ...
by zksvc Contributor in Deployment Architecture 12-23-2024
0 6
0
6
RAVISHANKAR
Hello, I would like send two different index data one to indexer and other to Intermediate forwarder.How the configur...
by RAVISHANKAR Explorer in Deployment Architecture 12-18-2024
0 1
0
1
SteveBowser
Everytime we have to force replication on the SH nodes of a SH Cluster, the inputs.conf replicates and overwrites the...
by SteveBowser Explorer in Deployment Architecture 12-18-2024
0 6
0
6
danielbb
I'm under the impression that HEC ingestion directly to the indexers is supported natively on cloud. I wonder whether...
by danielbb Motivator in Deployment Architecture 12-18-2024
0 1
0
1
Nawab
I have a SHC of 3 search heads. I changed some fields in data model of 1 sh. it is replicated on 2nd SH, but 3rd SH d...
by Nawab Communicator in Deployment Architecture 12-17-2024
0 10
0
10
mike1002
I am developing a splunk setup using docker image and Podman.  I am trying to setup 2 indexers along with an indexer ...
by mike1002 Engager in Deployment Architecture 12-17-2024
0 2
0
2
Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...