Deployment Architecture

Community Activity

How do I minimize the stored data of _introspection in a tiny cluster? At the moment, our tiny indexer has very little disk space and _introspection consumes roughly GB of storage a day, i... by danielbb Motivator in Deployment Architecture 01-21-2025 0 1	0	1
About cluster configuration Hello everyone, I have a question for you. In a single-site cluster, how can I configure license-manage to be a separ... by Lockie Engager in Deployment Architecture 01-20-2025 0 5	0	5
Hot/Warm/Cold bucket sizing- How do I set up my index.conf with as few possible per-index settings? After trying to get my head around the settings in indexes.conf to do data retention, and trying numerous different a... by jacauc Explorer in Deployment Architecture 01-19-2025 0 18	0	18
How do I configure the HF to produce raw data and forward it to the indexer? It's not clear to me how indexAndForward works, the documentation says - "Set to 'true' to index all data locally, in... by danielbb Motivator in Deployment Architecture 01-19-2025 0 11	0	11
Can i have just 2 search heads in a cluster looking to have 2 node search head cluster. so this means i need 3 servers, ie 2 members + 1 load balancer if i assi... by jiaqya Builder in Deployment Architecture 01-19-2025 0 10	0	10
Splunk Cloud Data Input Hello Team,When an organization is having Hybrid deployment , so they using Splunk cloud service too, can data be se... by mohsplunking Path Finder in Deployment Architecture 01-17-2025 0 4	0	4
All systems showing same IP Addresses in Forwarder Management My deployment server sits behind a load balancer. What I have noticed is that on the DS under Forwarder Management (... by DEADBEEF Path Finder in Deployment Architecture 01-16-2025 0 7	0	7
Expand a single node to a cluster I'm trying to take a single node Splunk Enterprise system and expand it to a cluster with an additional search head a... by desmando Engager in Deployment Architecture 01-15-2025 0 8	0	8
Why are there multiple results from the reporting search command? I am referencing the following to create a custom command.https://github.com/splunk/splunk-app-examples/tree/master/c... by HyunHo Engager in Deployment Architecture 01-15-2025 0 0	0	0
How do I configure a small installation? I have an indexer, a search head, and a heavy forwarder for a small installation. How do I configure them to communic... by danielbb Motivator in Deployment Architecture 01-15-2025 0 5	0	5
What is the best way to mask any sensitive data identified in the Splunk logs? Hi,I have a requirement to mask any sensitive data, such as credit card numbers or Social Security Numbers, that migh... by Richy_s Path Finder in Deployment Architecture 01-15-2025 0 7	0	7
Why is port 8089 not available via the UI? We see the following on the server via the ss -tulpn tcp LISTEN 0 128 ... by danielbb Motivator in Deployment Architecture 01-14-2025 0 4	0	4
Migrate dashboard, alerts and reports from 6.5 to latest cloud What is the fastest way to migrate Splunk objects dashboard , alerts, reports from one of these old version ( 6.5, 7)... by arusoft Communicator in Deployment Architecture 01-14-2025 0 1	0	1
Where do I download the syslog-ng open source installation file (Linux Ubuntu 20.x) from? I'm in the process of creating a small Splunk installation and I would like to know from where I would download the s... by danielbb Motivator in Deployment Architecture 01-14-2025 0 5	0	5
How should EKS be configured for experimenting with the splunk-operator? Hello,Can someone please provide the eksctl command line or command line in combination with a cluster config file th... by mdwecht Path Finder in Deployment Architecture 01-14-2025 0 0	0	0
How would I set up a Multisite and Single-Site Environment? Hey everybody, I am trying to set up a mix of multisite and single-site indexer cluster in an splunk enterprise envir... by hypePG Path Finder in Deployment Architecture 01-11-2025 0 6	0	6
Splunk Enterprise Installation Minimum Requirement Hello Splunkers,I need some help to understand what will be the minimum spects required for Splunk Enterprise Install... by mohsplunking Path Finder in Deployment Architecture 01-10-2025 0 2	0	2
What is the compression ratio of raw data in Splunk? Hi Team, Any one please let me know what is the compression ratio of raw data in Splunk? I heared that its 10:1 rati... by lal37 Explorer in Deployment Architecture 01-08-2025 1 7	1	7
Splunk Storage Sizing Guidelines and calculations Hi Team, I have doubt with Splunk Storage Sizing apps https://splunk-sizing.appspot.com/#ar=0&c=1&cf=0.15&cr=180&hwr=... by Ajinkya1992 Path Finder in Deployment Architecture 01-08-2025 0 3	0	3
Splunk Universal Forwarder Version Update I need to upgrade the Splunk Universal forwarder version to all the existing installed windows 2016 and 2019 servers.... by Chirag812 Explorer in Deployment Architecture 01-08-2025 0 2	0	2
Splunk cluster hardware planning We are planning to upgrade our Splunk hardware. We currently have below(multisite indexer cluster with independant se... by jpillai Path Finder in Deployment Architecture 01-07-2025 0 3	0	3
Replacing Immutable Splunk Forwarders show as duplicates in Deployment Server We have a 5 node Splunk forwarder cluster to handle throughput of multiple servers in our datacenter. Currently our ... by aDevOpsPerson Engager in Deployment Architecture 01-03-2025 0 1	0	1
What are the requirements for a minimal Splunk installation on Ubuntu 20.04? We are creating an installation of one indexer, one search head, and one universal forwarder with syslog, and I wonde... by danielbb Motivator in Deployment Architecture 01-03-2025 0 7	0	7
On which version of Ubuntu should we install Splunk? We are about to create new VMs with the Ubuntu OS. Which version of Ubuntu is supported and recommended? by danielbb Motivator in Deployment Architecture 01-03-2025 0 6	0	6
How to secure the Splunk platform with SSL Hello,I have a distributed Splunk architecture with a single search head, two indexers, and management tier : License... by BRFZ Communicator in Deployment Architecture 01-02-2025 0 21	0	21