Deployment Architecture

Community Activity

Splunk size of hot/warm/cold bucket Hello Splunkers My setup: 1. I have 4 indexer cluster (not a multi-site)with a Search Head Cluster. 2. Each indexer ... by aruncp333 Explorer in Deployment Architecture 08-20-2019 0 3	0	3
How to push configuration bundle from cluster master to indexers- but explicitly DO NOT restart In Indexer Clustering, is there a way to push the configuration bundle from a Cluster Master to the Indexers and expl... by st4ple Path Finder in Deployment Architecture 08-20-2019 0 2	0	2
How to copy index from Linux to Windows? Hi, We have a Linux server with diferents indexes but I need to migrate a index a windows server. We copy all fil... by Carolina Engager in Deployment Architecture 08-19-2019 0 7	0	7
Splunk version upgrade to 7.3.1 issue with calling the rest end point for the debug refresh HI I am having an issue in my pre-prod environment after the upgrade to 7.3.1, the python script that is calling th... by delgendy Explorer in Deployment Architecture 08-19-2019 0 1	0	1
Splunk Enterprise Forwarder -7.1.7 - Failed to Start - Error "Failed to read PID from file Invalid Argument" Hi, I was working on a puppet module to update existing splunkforwarder from 6.1.* to 7.1.7. Installation went smoot... by nandhak21 New Member in Deployment Architecture 08-19-2019 0 4	0	4
SplunkForwarder not reporting\showing up on server Hello all, I've tried to locate an answer for this issue for the past few days with no luck. So I have decided to gi... by raphabaroudi Engager in Deployment Architecture 08-19-2019 0 5	0	5
How to restrict user to certain indexes only? We have peers added to search heads, but users are able to search all the indexes on the peers. We want to restrict s... by jiaqya Builder in Deployment Architecture 08-19-2019 0 4	0	4
Heavyforwarder in HA I want to achieve HA for Splunk Heavy forwarder. I have to deploy 2 Heavyforwarder in HA. The UF can send the load ba... by ayushchoudhary Path Finder in Deployment Architecture 08-19-2019 0 1	0	1
Cluster and Non-cluster Indexer Please help me to know which is better clustered Indexers and non-clustered indexers? Key differences between cluster... by ayushchoudhary Path Finder in Deployment Architecture 08-18-2019 0 1	0	1
Unable to install Splunk 6.3.0 on RedHat 6.4 via rpm with error "can't create transaction lock on /var/lib/rpm/.rpm.lock (Permission Denied)" Hi I tried the rpm installation in a RedHat 6.4 and I got the following output: Warning: splunk-6.3.0 .... Signatur... by edrivera3 Builder in Deployment Architecture 08-18-2019 1 4	1	4
DHCP on Splunk UF Hi, let's say we got around hundred UF's which are DHCP (their hostname and/or ip address changes often) 1. From UF's... by inventsekar SplunkTrust in Deployment Architecture 08-16-2019 0 4	0	4
cloud vs non cloud server hello , we are using splunk enterprise installed on cloud server and want to manage my application and database serv... by ashish_chand New Member in Deployment Architecture 08-16-2019 0 2	0	2
AD overview, Windows Overview - no data Hello all, I am using splunk Enterprise 7.3.1, with the windows apps and the AD add-on for windows AD. I get no data ... by eholz1 Builder in Deployment Architecture 08-16-2019 0 2	0	2
How to prevent search head crashes due to large exports A user tried to export 110,000,000 events today to excel and crashed our SH twice. How can we prevent it? by danielbb Motivator in Deployment Architecture 08-16-2019 0 2	0	2
SHC Captain Disconnected Hey Splunkers, It seems that several times per hour that our SHC (of 9 SH's) seems to randomley disconnect the SHC C... by MFiller90 Explorer in Deployment Architecture 08-15-2019 0 1	0	1
SHClustering SSLv3 Errors Hey guys, Been troubleshooting my distributed searching for the last two days. My environment: Primary facility: Cl... by ekenne06 Path Finder in Deployment Architecture 08-14-2019 0 3	0	3
SHCluster Rolling restart stops frequently After pushing a new shcluster bundle, the shcluster self-initiated a rolling restart. We have 15 servers in this clus... by sylim_splunk Splunk Employee in Deployment Architecture 08-14-2019 1 1	1	1
Compare records from two different indexes by match Hello community, i have two databases a and b. There are data fields which I would like to compare with each other. ... by rachel88 New Member in Deployment Architecture 08-14-2019 0 1	0	1
How ignore certain index types from the dbinspect I'm trying to run the following search and I still get the results from the index even after I mention I NOT to see t... by satyabhi21 New Member in Deployment Architecture 08-13-2019 0 1	0	1
maxkbps on 10gb network Hi All, So I'm in the process of fixing some huge delays in my data ingestion (some data takes up to 2 hours+) to be... by Jarohnimo Builder in Deployment Architecture 08-13-2019 1 3	1	3
reports are failing in search head cluster I see below error message in one of my search head cluster,can you please assst me 08-10-2019 12:01:16.072 +0100 WAR... by shivanandbm Explorer in Deployment Architecture 08-13-2019 0 2	0	2
What does this search head cluster function alert WARN messages mean? Every other day, we are getting following error on the internal index. Nearly 65,000 messages are generated for less ... by spectrum2035 Explorer in Deployment Architecture 08-13-2019 1 9	1	9
How to add the logs of EMC unity storage to splunk? I want to integrate EMC unity 500 storage with Splunk, to be able to see its logs on Splunk, so how can I do that? by ahmedzard Explorer in Deployment Architecture 08-13-2019 3 5	3	5
Splunk cloud indexer port 9997 is not listening for my splunk cloud instance Splunk cloud indexer port 9997 is not listening for my splunk cloud instance . Please let me know whether I cannot a... by sivauser New Member in Deployment Architecture 08-13-2019 0 1	0	1
Why do search head cluster members keep old bundle files, and can these be deleted safely? Hi, We currently have a Search Head Cluster setup which has one deployer and two cluster members. One of the cluster... by att35 Builder in Deployment Architecture 08-12-2019 0 3	0	3