Deployment Architecture

Community Activity

TSM with Splunk Hi We are trying integrate TSM servers with splunk and create a dashboard . Please assist what are logs we need to... by Hema_Nithya Explorer in Deployment Architecture 09-09-2019 1 5	1	5
Multi site cluster (3 sites) with a site separated from the other ones Hello, please I would like to know if the following one is a possible/valid Splunk architecture. Multiste cluster, w... by cafissimo Communicator in Deployment Architecture 09-06-2019 0 3	0	3
I have search head clustering and SSO set up with reverse proxy authentication, but why do my searches produce "Server Error"? I have a search head cluster and I set up SSO with reverse proxy authentication and set scripted authorization using ... by ishaanshekhar Communicator in Deployment Architecture 09-06-2019 2 10	2	10
Multisite Cluster staggered deployment We are deploying a new instance of Splunk Enterprise and have decided on a multisite cluster architecture for high av... by hunderliggur Path Finder in Deployment Architecture 09-05-2019 0 3	0	3
Search Head Cluster scheduled searches: What are these Status values in scheduler.log? Looking at scheduler.log from a search head cluster member, the scheduler.log has a status column that can have follo... by sat94541 Communicator in Deployment Architecture 09-05-2019 4 2	4	2
View Indexer config with only access to the cluster master & search head GUI I have administrator access to the GUI of the search head cluster master and search head, but not the indexers. I am ... by rusty009 Path Finder in Deployment Architecture 09-05-2019 0 7	0	7
After Splunk forwarder upgrade to version 7.3.0 from 6.6.x - splunk forwarder is not starting ? Hi All, After upgrading my splunk forwarder to version 7.3.0 from 6.6.x. my splunk forwarder didnt start. it is shwo... by rakesh_498115 Motivator in Deployment Architecture 09-04-2019 0 1	0	1
Looking for High Availability solution workaround for Heavy Forwarder Hi Readers, In my Splunk Cloud environment, we using HWF on Windows to fetch inputs via REST API (for example using ... by bishtk Communicator in Deployment Architecture 09-04-2019 0 1	0	1
Linux Addon Whenever I a select any app on splunk instance it open the Linux/Unix app setup page. by riqbal47010 Path Finder in Deployment Architecture 09-03-2019 0 0	0	0
Defining search-peer with configuration only We are trying to configure search peers with search heads and indexers using configuration files only. Splunk provid... by beaumaris Communicator in Deployment Architecture 09-03-2019 1 6	1	6
search head captain clsoing the connection cluster mamber we are having 3 search head and they are in cluster. splunkd process went down in two search head. when i checked the... by shivanandbm Explorer in Deployment Architecture 09-03-2019 0 4	0	4
Splunk cluster indexers are consuming high memory Splunk cluster indexers are consuming high memory. Memory usage on indexer server is always at 99% used, after restar... by ashikuma Explorer in Deployment Architecture 09-02-2019 0 2	0	2
Search Head Clustering is not enabled on this node. REST endpoint is not available Hi, Anyone could help .. Search Head Clustering is not enabled on this node. REST endpoint is not available We have... by Mohsin123 Path Finder in Deployment Architecture 09-01-2019 1 4	1	4
Deployment Server throwing name resolution errors? all, Out of no where my deployment server won't send data to my indexers nor will it read it's search peers. Everyt... by daniel333 Builder in Deployment Architecture 08-30-2019 0 2	0	2
How to change the index size of _audit index on a cluster? I have a cluster set up with 1 index master, and 2 index peers. I would like to change the size of the _audit index ... by agentguerry Path Finder in Deployment Architecture 08-30-2019 0 4	0	4
A URL that has the latest Splunk install kit without specifying the version I am working on automation and would love to find a URL path that will default to the latest version of splunk instal... by brent_weaver Builder in Deployment Architecture 08-30-2019 0 0	0	0
Search head and Indexer has different indexes list I have a question about indexes. In my environment, search head cluster is 5ea, indexer peer node 20ea, indexer clu... by moonyoungjung New Member in Deployment Architecture 08-29-2019 0 7	0	7
How to change savedsearches and views in bulk on clustered search head I have have been holding off on deployment of the splunk app for windows v5 with knowledge that many (100+) dashboard... by dstaulcu Builder in Deployment Architecture 08-29-2019 1 11	1	11
How do I get a count of unique and total buckets in my environment? I want to know how many buckets I have in my indexing clustered environment, both the total count of all buckets and ... by davidpaper Contributor in Deployment Architecture 08-28-2019 5 3	5	3
Standalone Search Head into Distributed Environment I have the following in my configuration 1 x Cluster Master 2 x Indexers (indexers are configured as site 1 and site... by willadams Contributor in Deployment Architecture 08-28-2019 0 4	0	4
Restore logs to Splunk Hi Team, Please look into this case on priority : In Splunk environment(3 Indexer,3 search head,1 deployment server)... by ShradhaSurdikar Engager in Deployment Architecture 08-28-2019 0 0	0	0
Splunk forwarder connection failure, even though the ports are opened. HI Team, I have opened the ports to the heavyforwarder from the UF. The ports are opened from UF to HF, but not the ... by nadlurinadluri Communicator in Deployment Architecture 08-28-2019 0 10	0	10
Splunk Forwarder Connection Issue with "Error in SSL_read - sock_error = 10054" Splunk Forwarder 7.2.1 is installed on Windows 2016 instance cannot send logs/data to the indexer with version 7.1.3.... by caglabaylan Engager in Deployment Architecture 08-27-2019 1 2	1	2
SSL certificate for F5 VIP to search head cluster? We're finishing up our migration from a single search head to a search head cluster. Our company uses F5 load balanc... by rpquinlan Path Finder in Deployment Architecture 08-23-2019 2 4	2	4
Disable visibility of app on Search Head Cluster Hey All, I would like to turn of visibility for a number of apps on our search head cluster and could of sworn I cou... by adalbor Builder in Deployment Architecture 08-22-2019 1 2	1	2