Deployment Architecture

Community Activity

Do I have to backup $SPLUNK_HOME/var/run directory for a reliable backup? When I make a backup of a splunk server every few days, I just usually tarball the whole /opt/splunk dir. This wor... by damonmanni Path Finder in Deployment Architecture 09-16-2019 1 0	1	0
AdminHandler PersistMessages - Failed to remove message I'm seeing the following error message in splunkd.log: 09-16-2019 11:24:24.095 +0000 ERROR AdminHandler:PersistMessa... by jimams New Member in Deployment Architecture 09-16-2019 0 0	0	0
Indexer Clustering - what bundle updates trigger a rolling restart? We've been using stand alone indexers for three years and only in the last few week do we have a multisite indexer cl... by Runals Motivator in Deployment Architecture 09-16-2019 1 6	1	6
SHC - push apps without deployer Hi, I want datasets addon onto my search heads of my cluster. Port 8089 is not open between the deployer and SHC sea... by nareshinsvu Builder in Deployment Architecture 09-15-2019 0 2	0	2
Can I use a deployment server to scale my Splunk Enterprise deployment? Where can I find more information about using a deployment server and configuration files to manage my Splunk Enterpr... by adukes_splunk Splunk Employee in Deployment Architecture 09-13-2019 0 1	0	1
How to resolve 404 in Distributed Monitoring Console General Setup? When I enable distributed mode on my cluster master all the indexer nodes are added to the peers list. However, When... by thormanrd Path Finder in Deployment Architecture 09-13-2019 0 0	0	0
Maximum Number of Concurrent Running Jobs Search Head Cluster Error Hi, We have a search head cluster with 3 search heads - We are seeing the following message and a decent skip rati... by ykpramodhcbt Path Finder in Deployment Architecture 09-13-2019 1 4	1	4
How do I remove a search head that is appearing under the Indexer Clustering page? Hi, I've got problem - I added an additional search head to a Splunk cluster (not search head cluster) and I can se... by dawid_schulz Explorer in Deployment Architecture 09-12-2019 1 4	1	4
edit file server.conf i changed file server.conf as per this document "https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Serverconf"... by vumanhtai Path Finder in Deployment Architecture 09-12-2019 0 4	0	4
How to replace a standalone search head Hi, How can I replace a dead standalone search-head ? With the pre-saved data I should have used in this migration... by michaelissartel Explorer in Deployment Architecture 09-12-2019 0 1	0	1
Are rolling buckets moved or copied? Hi all, By what means are buckets rolled? If, for example, a bucket is rolled from warm to cold, is that bucket copi... by alekksi Communicator in Deployment Architecture 09-12-2019 0 5	0	5
Splunk Trooubleshooting indexer-segfault and perf. I have 20 indexers and I have getting this error while running dmesg from one particular indexer: [8459645.678270] p... by muizash Path Finder in Deployment Architecture 09-12-2019 0 1	0	1
[quick help on approach] migrating from 6.6.1 to 7.1.2 Hello Splunkers I am trying to migrate the following items from a windows 2008 r2 non-cluster to Linux Rhel7 cluste... by sdoumbia4321 Engager in Deployment Architecture 09-11-2019 0 0	0	0
System clock not identical in SH and indexer. Hi Experts, I am getting below error in Setting -> Search peers ->Distributed search in my Splunk Search heads and S... by arun_kant_sharm Path Finder in Deployment Architecture 09-11-2019 0 3	0	3
Setup Splunk for VMware ESXi hosts I am trying to feed ESXi host syslogs to Splunk. The documentation around that is quite comprehensive. The requiremen... by ahatom New Member in Deployment Architecture 09-11-2019 0 1	0	1
Splunk test environment I need to set up an splunk test environment to test out apps before adding them to production environment, also to te... by erikwie Path Finder in Deployment Architecture 09-11-2019 0 1	0	1
Recieving error "Access is denied" when trying to deploy 'splunk apply shcluster-bundle'? I have a Windows 2012 R2 server with UAC disabled. I've just installed Splunk Enterprise, placed an app in the $SPLU... by frankwayne Path Finder in Deployment Architecture 09-11-2019 0 11	0	11
Delay in event log processing from Splunk forwarders to Syslog Hi, We could observe that there is a Delay in event log processing from Splunk forwarders to Syslog by three hours,... by snehairali New Member in Deployment Architecture 09-11-2019 0 2	0	2
Indexer VM corrupt we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to di... by riqbal47010 Path Finder in Deployment Architecture 09-11-2019 0 2	0	2
Forward Events to Multiple Seperate Indexers Guys, I wish to collect all events from my windows server security log and send to my main Splunk enterprise instance... by shocko Contributor in Deployment Architecture 09-11-2019 0 2	0	2
Splunk forwarder failed to send logs from amazon linux instance Trying to send logs to Splunk server using forwarder installed on Amazon Linux instances. I am not seeing any data on... by meet_vadaria Engager in Deployment Architecture 09-10-2019 0 2	0	2
Splunk 7.3.1 Windows apply shcluster-bundle -target https://xxxx:8089 -auth admin:password fails with Error moving tmp_staging_area I am trying to push my first app through the search head deployer. this is a brand new Splunk 7.3.1 environment with ... by vinaypradhan Explorer in Deployment Architecture 09-10-2019 0 0	0	0
Single index on indexer not getting new data. Other indexes are. I have a splunk cluster with 3 indexers. I have a non replicated index that for some reason has stopped getting new d... by a238574 Path Finder in Deployment Architecture 09-10-2019 0 2	0	2
Any issues installing lower version of search heads on the 7.2 version index cluster, deployment server and forwarder? Hi, We have a indexer cluster running on 7.2 and a search head running on same version,. We want to install an inde... by muthukumarmurug New Member in Deployment Architecture 09-10-2019 0 1	0	1
search head version compatibility Hi, We have a indexer cluster running on 6.5.3 and a search head running on same version,. We want to install a i... by nawazns5038 Builder in Deployment Architecture 09-10-2019 0 4	0	4