Deployment Architecture

Community Activity

What does this search head cluster function alert WARN messages mean? Every other day, we are getting following error on the internal index. Nearly 65,000 messages are generated for less ... by spectrum2035 Explorer in Deployment Architecture 08-13-2019 1 9	1	9
How to add the logs of EMC unity storage to splunk? I want to integrate EMC unity 500 storage with Splunk, to be able to see its logs on Splunk, so how can I do that? by ahmedzard Explorer in Deployment Architecture 08-13-2019 3 5	3	5
Splunk cloud indexer port 9997 is not listening for my splunk cloud instance Splunk cloud indexer port 9997 is not listening for my splunk cloud instance . Please let me know whether I cannot a... by sivauser New Member in Deployment Architecture 08-13-2019 0 1	0	1
Why do search head cluster members keep old bundle files, and can these be deleted safely? Hi, We currently have a Search Head Cluster setup which has one deployer and two cluster members. One of the cluster... by att35 Builder in Deployment Architecture 08-12-2019 0 3	0	3
Cluster Indexer 1 is at 99% on Data Pipeline I am setting up my first cluster in a lab at my house. My setup is: 1 Cluster Manager: cm 2 Indexers: idx01, idx02 1... by kg_bdmeyer New Member in Deployment Architecture 08-12-2019 0 2	0	2
How do I connect to SQL Server I cant see any proper, useful help on this. The whole experience of SPLUNK is below par. I find myself going round in... by darrylwilson New Member in Deployment Architecture 08-12-2019 0 3	0	3
Is there a systemd unit file for Splunk? Based on other discussions around systemd, i created the unit file below. This seemed to work... Until the latest RHE... by twinspop Influencer in Deployment Architecture 08-12-2019 2 12	2	12
Universal Forwader I installed UF on Win 10 based on steps shown in Splunk web site. But after finishing, I can not find this program wh... by mezami New Member in Deployment Architecture 08-12-2019 0 4	0	4
search factor and replication factor not meeting and cluster master showing peers status pending after restarting one indexer directly search factor and replication factor not meeting and cluster master showing peers status pending after restarting one... by sathwikr076 Communicator in Deployment Architecture 08-09-2019 0 5	0	5
How to resolve error "Waiting for requisite number of peers to join the cluster... Cluster has only 0 peers (waiting for 3 peers to join the cluster)"? Splunk Answers, I started receiving this message on August 23rd, 2016. I am not sure why the peers will not join cl... by andrewdwest Explorer in Deployment Architecture 08-08-2019 4 8	4	8
Can we run a Unix script using splunk I have created a new Unix script. So daily manually I am running the script. So I want to know whether can we run tha... by prerana_jain Explorer in Deployment Architecture 08-08-2019 0 1	0	1
Splunk Cloud: Dynamic self storage thawing replicated data When Splunk Cloud archives data to self managed AWS buckets, does that include replicated data? If the buckets were ... by mohlatif Explorer in Deployment Architecture 08-07-2019 0 2	0	2
Search Head Cluster member removal How can I remove a search head cluster member when that member is down? Power outage at a location took down two of ... by coreyf311 Path Finder in Deployment Architecture 08-07-2019 1 5	1	5
No of search head required. Hi, I am sizing for various ingestion volumes of 1 TB,5 TB,10 TB and 20 TB ,considering 300 GB per indexer and upto ... by swathi_dell New Member in Deployment Architecture 08-07-2019 0 1	0	1
30 minute time bucket vs 2 day time I know this can be done with an append, but I am pretty sure this is possible just via evals. Please help me out if p... by JoshuaJohn Contributor in Deployment Architecture 08-05-2019 0 2	0	2
Splunk Universal Forwader: Data sending to two set of indexers hi folks, The scenario is like below 1. Got a single deployment-server 2. Got two indexer cluster each without about... by koshyk Super Champion in Deployment Architecture 08-05-2019 0 10	0	10
Search head pooling upgrade DOUBT ! @woodcock @martin_mueller @somesoni2 If someone has upgraded SHP. Could you please clear my doubt for point 8. I ha... by ramprakash Explorer in Deployment Architecture 08-05-2019 0 3	0	3
How to upgrade Search head pooling in upgrading Splunk from 6.0.1 to 7.2.3 Hi, I need urgent assistance on upgrading Search head pooling. Mine is distributed environment(6.0.1) with below det... by ramprakash Explorer in Deployment Architecture 08-05-2019 0 13	0	13
Multiple Deployments from Same Deployer Hi All, I am looking for a solution where i can push different set of Apps & Add-on's from same Deployer to the foll... by ab374134 Explorer in Deployment Architecture 08-05-2019 0 1	0	1
forwarder for ARM: /opt/splunkforwarder/bin/splunk: No such file or directory Guys, i'm getting crazy with the installation of the universal forwarder for ARM I followed all the instructions her... by idsiano Explorer in Deployment Architecture 08-05-2019 0 9	0	9
Splunk indexer node unable to join the cluster I have an indexer cluster with 1 master and 2 peer nodes. The peer nodes machine got rebooted suddenly and now 1 of t... by skrish91 Path Finder in Deployment Architecture 08-04-2019 0 5	0	5
I'm unable to configure my splunk virtual box instance as a license master. How would I do this? I currently have a virtual box machine running ubuntu desktop 14.04 on my mac(host machine). I'm trying to configure ... by ashnet16 Path Finder in Deployment Architecture 08-02-2019 0 3	0	3
is there a way for Splunk forwarder to merge difference lines to one event? Hello, I just getting into Splunk and wondering if I can set the forwarder (maybe heavy forwarder) to merge differen... by avivbaru Engager in Deployment Architecture 08-01-2019 0 1	0	1
How do I configure the outputs.conf file to forward data from heavy forwarders to a group of load balanced indexers? I have a cluster with a search head, master node, 2 indexers, and a deployment server. I am able to get the cluster ... by thomas_forbes Communicator in Deployment Architecture 07-31-2019 2 5	2	5
Segfault errors on a indexer in cluster We have this issue very frequently which appeared to have started right after the last upgrade. Below kernel logs sho... by sylim_splunk Splunk Employee in Deployment Architecture 07-31-2019 1 3	1	3