Deployment Architecture

Community Activity

How many indexers do I need in my Splunk deployment? Does anyone have any good resources about indexes and index management? Before I set up a bunch of indexes, I'd like... by adukes_splunk Splunk Employee in Deployment Architecture 09-26-2019 0 3	0	3
Number of Index's to Host or Events We are just starting to really dive into some more in depth reports. In some cases we are seeing some slow run times;... by aohls Contributor in Deployment Architecture 09-26-2019 0 4	0	4
Should we use deployment server for forwarders with index clustering? Hi, Suppose we have index clustering implemented so can we use deployment server for forwarders? Regards, Sachin by sachinbansal New Member in Deployment Architecture 09-25-2019 0 4	0	4
Can I use forwarders to scale my Splunk Cloud deployment? Where can I find more information about using forwarders to manage my Splunk Cloud deployment? by adukes_splunk Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
Can I use configuration files to extend the power of Splunk Enterprise? Does anyone know where I can find guidance about editing configuration files? by adukes_splunk Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
Hot, warm to colddb movement The method is which I can use (hot, warm db) for 1 year and I move to the cold db from this or greater? Description: ... by khyoung7410 Communicator in Deployment Architecture 09-25-2019 1 6	1	6
Do you have any guidance about how to revitalize a Splunk Enterprise/Splunk Cloud deployment that's stuck on autopilot? I have a Splunk Enterprise/Splunk Cloud deployment that's been on autopilot for a while. We've been adding data sourc... by jmulcaster_splu Splunk Employee in Deployment Architecture 09-25-2019 0 3	0	3
App from single-instance to distributed deployment architecture. Hi, I already have splunk app (used splunk JDK for development) which runs fine on single-instance splunk. I want t... by ajain_mi Explorer in Deployment Architecture 09-24-2019 0 3	0	3
Under what configuration file and stanza do I configure CMConfig - multisite=[true\|false]? Every 5 seconds on my deployment server (in a clustered environment), I get this in splunkd.log: WARN CMConfig - mu... by dave_maclean Explorer in Deployment Architecture 09-24-2019 3 5	3	5
distributed search query works (kinda) but only returns single Hi, We have 10 sites each with their own splunk server (search head, indexer etc). Each is collecting the same infor... by sdewar83 Path Finder in Deployment Architecture 09-23-2019 0 3	0	3
Search Head Performance verification for high load of users We have a dashboard with 12 Panels from different sources, and each panel is powered by summary index. As of now, the... by pgadhari Builder in Deployment Architecture 09-22-2019 0 6	0	6
Deploymentserver behind AWS Loadbalancer - How to get original Client IPs? Hello, any idea how to get original client ip address of forwarder which are connected to a deploymentserver via an A... by Paul1896 Path Finder in Deployment Architecture 09-19-2019 0 0	0	0
What is the best action plan during hardware/firmware maintenance of a Splunk Linux server? We have 8 Splunk indexers in our environment (2 sites). One indexer server needs to be serviced: update the BIOS, RA... by mlevsh Builder in Deployment Architecture 09-19-2019 0 6	0	6
How to point forwarders to new Splunk instance We went through an acquisition and both of us have Splunk instances. We want to migrate from our Splunk Cloud instanc... by erinbwest New Member in Deployment Architecture 09-18-2019 0 3	0	3
deployment server clients not showing up Hello, When I view the deployment clients under forwarder management, not all my clients are being displayed. Ever... by dglass0215 Path Finder in Deployment Architecture 09-18-2019 0 4	0	4
Splunk Index storage configurations Hi , We are building a new Splunk infrastructure in which daily 300 GB data will be ingested, we are running with 2 ... by nnimbe1 Path Finder in Deployment Architecture 09-17-2019 0 0	0	0
splunk app for infrastructure status inactive but getting metrics (linux) Hi, help me figure it out. I connected the servers to the splunk app for infrastructure using collectd, the write spl... by bot97 Engager in Deployment Architecture 09-16-2019 0 1	0	1
Do I have to backup $SPLUNK_HOME/var/run directory for a reliable backup? When I make a backup of a splunk server every few days, I just usually tarball the whole /opt/splunk dir. This wor... by damonmanni Path Finder in Deployment Architecture 09-16-2019 1 0	1	0
AdminHandler PersistMessages - Failed to remove message I'm seeing the following error message in splunkd.log: 09-16-2019 11:24:24.095 +0000 ERROR AdminHandler:PersistMessa... by jimams New Member in Deployment Architecture 09-16-2019 0 0	0	0
Indexer Clustering - what bundle updates trigger a rolling restart? We've been using stand alone indexers for three years and only in the last few week do we have a multisite indexer cl... by Runals Motivator in Deployment Architecture 09-16-2019 1 6	1	6
SHC - push apps without deployer Hi, I want datasets addon onto my search heads of my cluster. Port 8089 is not open between the deployer and SHC sea... by nareshinsvu Builder in Deployment Architecture 09-15-2019 0 2	0	2
Can I use a deployment server to scale my Splunk Enterprise deployment? Where can I find more information about using a deployment server and configuration files to manage my Splunk Enterpr... by adukes_splunk Splunk Employee in Deployment Architecture 09-13-2019 0 1	0	1
How to resolve 404 in Distributed Monitoring Console General Setup? When I enable distributed mode on my cluster master all the indexer nodes are added to the peers list. However, When... by thormanrd Path Finder in Deployment Architecture 09-13-2019 0 0	0	0
Maximum Number of Concurrent Running Jobs Search Head Cluster Error Hi, We have a search head cluster with 3 search heads - We are seeing the following message and a decent skip rati... by ykpramodhcbt Path Finder in Deployment Architecture 09-13-2019 1 4	1	4
How do I remove a search head that is appearing under the Indexer Clustering page? Hi, I've got problem - I added an additional search head to a Splunk cluster (not search head cluster) and I can se... by dawid_schulz Explorer in Deployment Architecture 09-12-2019 1 4	1	4