Deployment Architecture

Discussions

Thread Info

What are the passphrases for the .pem files in the Universal Forwarder Credentials file, splunkclouduf.spl?

Hello! What are the passphrases for the client.pem and server.pem files in the Universal Forwarder Credentials fil...

by Engager in

Why are there errors when configuring search head clustering with a deployer?

Hi , I am configuring a search head clustering with a deployer but ran in many issues: as per the Splunk docs these a...

by Communicator in

./splunk cmd python fill_summary_index.py -app splunkdotcom -name "*" -et -mon@mon -lt @mon -dedup true -auth admin:changeme

Hi , Currently we have infrastructure with one search head deployer , one indexer cluster , one deployment server wit...

by Communicator in

Capacity Planning

I have build a new environment. So the requirement is have to index 100gb data what are the hard ware requirement? Ho...

by Engager in

how to determine the name of the server the universal forwarder resides on ? getting the hostname as $decideOnStartup ?

Hi All, Currently i am facing an issue in finding the correct host name for windows Universal agent server which is s...

by Motivator in

Splunk indexing delays showing as negative.

We have a server running in Japan timezone. Recently when we did not find logs during a live testing. Next day we ran...

by New Member in

I am not seeing the detention option from the Search Head Clustering page for Splunk 7.05 Is this feature not available at this release?

I am not seeing the detention option from the Search Head Clustering page for Splunk 7.05 Is this feature not availab...

by Explorer in

Frozen Buckets - Replicate or Localize

I'm mulling a design and need some tips! Scenario: a customer has a multi-site cluster (assume low latency) with RF-2...

by New Member in

Deployment Server throwing error when making changes to an app and reloading the server class

Reference to https://answers.splunk.com/answers/666034/forwarder-management-warning-icon.html because it was never re...

by Path Finder in

Moving Splunk Environment from Windows OS to CentOS

Hi All, We are planning to move our Splunk environment 7.2.4 which is on Windows OS to CentOS, we are having distr...

by Path Finder in

Splunk reading file but not indexing the data

I have migrated a docker environment off of an old legacy build to my new Splunk environment. Some of my data aft...

by Path Finder in

How can i reduce the Search Head Latency to reduce server CPU utilization ?

Hello Splunkers, We have a search head cluster having 3 search heads from those 3 search heads only one search hea...

by Motivator in

On a three node SH cluster, why does one member doesn't get up again?

Hello together, we have a 3 node SH-Cluster where one member is not getting up again. If we want to restart the ...

by Explorer in

Migrate Index data from old cluster to new cluster

Due to increase in Splunk Data usage, we have deployed new cluster and planning to migrate few indexes to new cluster...

by Explorer in

Invoking external Rest request using SPLUNK REST API

Hi Friends I have a requirement to collect some data from a RESTful service hosted in one of cloud environments. T...

by Path Finder in

deploymentserver.conf gets empty after restart

Hello, I have a strange behavior while trying to setup an UF (7.2.3) as deployment client. When I do 'set deploy-p...

by Path Finder in

Event longer then bin - Availability report

Hello! Events I'm analyzing represent sites in down state. Each event has SITENAME, EVENTTIME and CLRTIME, obviously ...

by Explorer in

How to create a dashboard for server status i.e. whether it is up or not?

Hi Team, I want to create a dashboard which shows the current status of the servers i.e. whether the server is run...

by New Member in

Write to metric index using Splunk Java SDK

Hi all, I am a newbie and had a question on the new Metric index described here : https://docs.splunk.com/Documen...

by Engager in

Limit indexes available for summary indexing

When creating a scheduled search with summary indexing enabled a drop down is displayed that allows users to select t...

by New Member in

How to troubleshoot why a deployment client is unable to phone home to the deployment server?

We are unable to get the deployment client to show in the deployment console. Other Windows/Linux servers are connect...

by New Member in

Why am I unable to establish connection (IIOP and RMI) between deployment manager/Node (IBM Webserver) 9.0.0.5 and Splunk 6.6.1?

Environment: IBM WAS 9.0.0.5 ND , Splunk 6.6.1 JAVA SDK: java version "1.8.0" Step1: We have installed JMX addon a...

by New Member in

Is there a way for a Splunk Enterprise deployment to behave as a UF as well?

Hello, I'd like to know whether a Splunk Enterprise deployment can act as a UF to another Splunk Enterprise deploy...

by Motivator in

ReplicationStatus: Failed - Failure info: Dispatch Command: Search bundle throttling

Hi, I am facing an issue while searching for logs from Search heads. Below are the errors Distributed: Unable to d...

by New Member in

Planning to have syslog-ng on one of our heavy forwarder

Syslog configuration we have 2 newly buildup heavy forwarders in our splunk environment, instead of having syslog-...

by New Member in

Get Updates on the Splunk Community!

Deployment Architecture

Discussions

What are the passphrases for the .pem files in the Universal Forwarder Credentials file, splunkclouduf.spl?

Why are there errors when configuring search head clustering with a deployer?

./splunk cmd python fill_summary_index.py -app splunkdotcom -name "*" -et -mon@mon -lt @mon -dedup true -auth admin:changeme

Capacity Planning

how to determine the name of the server the universal forwarder resides on ? getting the hostname as $decideOnStartup ?

Splunk indexing delays showing as negative.

I am not seeing the detention option from the Search Head Clustering page for Splunk 7.05 Is this feature not available at this release?

Frozen Buckets - Replicate or Localize

Deployment Server throwing error when making changes to an app and reloading the server class

Moving Splunk Environment from Windows OS to CentOS

Splunk reading file but not indexing the data

How can i reduce the Search Head Latency to reduce server CPU utilization ?

On a three node SH cluster, why does one member doesn't get up again?

Migrate Index data from old cluster to new cluster

Invoking external Rest request using SPLUNK REST API

deploymentserver.conf gets empty after restart

Event longer then bin - Availability report

How to create a dashboard for server status i.e. whether it is up or not?

Write to metric index using Splunk Java SDK

Limit indexes available for summary indexing

How to troubleshoot why a deployment client is unable to phone home to the deployment server?

Why am I unable to establish connection (IIOP and RMI) between deployment manager/Node (IBM Webserver) 9.0.0.5 and Splunk 6.6.1?

Is there a way for a Splunk Enterprise deployment to behave as a UF as well?

ReplicationStatus: Failed - Failure info: Dispatch Command: Search bundle throttling

Planning to have syslog-ng on one of our heavy forwarder

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Observability protocols to know about

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

Setup Splunk on AWS Elastic Beanstalk

Splunk Intermediate Forwarder Setup

CMMC Version 2.0

Stream forwarder only works when running as root

Search Cluster Overwriting etc/system/local/inputs...