Deployment Architecture

Community Activity

Splunk search heads "waiting for data..." I have a indexer cluster up and running receiving data from forwarders. I can confirm the indexer cluster is set up ... by scottj1y Path Finder in Deployment Architecture 06-20-2019 2 5	2	5
Deployment Server Hi, In production environment ,I've deployment server with several serverclasses(having multiple Apps and clients). ... by rupeshn Explorer in Deployment Architecture 06-19-2019 0 3	0	3
Introspection Replication I have a 2 peer cluster and have run into the following with 2nd cluster bundle deployment (version 6.1.2) guid=3B88... by rsec39 Engager in Deployment Architecture 06-19-2019 3 8	3	8
How to divide field values into groups depending on a different field? I have 2 fields. Store Minutes 81145 22 81234 31 81145 38 87654 35 81234 22 81145 10 87654 13 The data should ... by nikita012 New Member in Deployment Architecture 06-19-2019 0 4	0	4
Deployment Server - App deployment I've deployed few apps to some serverclasses(having multiple clients). After deploying these apps, I realized that de... by rupeshn Explorer in Deployment Architecture 06-19-2019 0 2	0	2
Why is the data not replicating correctly in an index clustering environment in 7.1.1? Hello! I'm having a frustrating time attempting to set up a test environment with Index Clustering and I've reached ... by jamesmoriarty Explorer in Deployment Architecture 06-19-2019 0 3	0	3
Why does an eventtype calling a macro only fails in an indexer / search head cluster? (macro is not expanded) Hi ! For a new release of my application, i would have likes to facilitate users customizing by implementing eventty... by guilmxm Influencer in Deployment Architecture 06-18-2019 0 7	0	7
Is there ova available for POC on esxi? Hi. I'm trying to set up a simple Proof of Concept in an ESXi environment. I found a .ova for download but it doesn'... by mc581w New Member in Deployment Architecture 06-17-2019 0 1	0	1
deployment server - add IP range to ServerClass to have servers added to deployment server automatically I have a lab that has an IP range that they use for their servers. Is there anyway to have the servers automatically ... by kcooper Communicator in Deployment Architecture 06-17-2019 0 7	0	7
Can we use a cluster member as a license master in Search Head Clustering? we recently built a new splunk environment using search head clustering (6.2) and firewall rules are open from cluste... by spsrasru Path Finder in Deployment Architecture 06-14-2019 1 5	1	5
Unable to add windows forwarder to cloud trial Hi, I've just started a trial of Splunk Cloud and have followed the instructions on how to add a forwarder on Window... by elan_tech New Member in Deployment Architecture 06-14-2019 0 2	0	2
Connect a Search Head running on Splunk 7.1.6 to 2 different clusters running on 7.1.6 & 7.2.1 Hi Team, I have to test the following scenario. Can you help me whether this works: A Test Search Head that has Spl... by santosh_hb Explorer in Deployment Architecture 06-13-2019 0 1	0	1
In what order do we upgrade Splunk servers in our clustered environment from 6.3.0 to 6.4.1? Hi, We are upgrading all of our Splunk components from Splunk 6.3.0 to 6.4.1. Following are the servers in the clu... by jishelar Explorer in Deployment Architecture 06-11-2019 0 2	0	2
Reuse Splunk Instance Hi, In a distributed system, We have multiple Splunk Instances(License Master, Search Head and Master Node) which are... by dustymehul Explorer in Deployment Architecture 06-11-2019 0 2	0	2
Can I manually trigger events in an index to roll to frozen? Hello, I am relatively new to the topic of event rolling between buckets, and I'd like to know how much flexibility ... by andrewtrobec Motivator in Deployment Architecture 06-11-2019 0 1	0	1
can i upgrade my OS version to the latest from 7.4 to 7.6 can i upgrade my OS version to the latest from 7.4 to 7.6 to avoid the patching vulnerability by Nadhiyaa Path Finder in Deployment Architecture 06-11-2019 0 5	0	5
$_Index_name Variable Need To Know How To Setup Correctly I'm working on trying to figure out how to get the index name to show up correctly instead of placing the files in a ... by gregbaskin Explorer in Deployment Architecture 06-10-2019 0 3	0	3
How to get events count by day with relative difference in time Hello, I need to get the daily Events count per week. till this I did using Query index = * myBaseQuery \|bucket _ti... by saitejagayala New Member in Deployment Architecture 06-10-2019 0 3	0	3
Where should I create Summary Index in a Search Head Cluster? Hello, I have a query. Where should I create the indexes for summary index data in the Search head clustering archit... by dhawal_sanghvi New Member in Deployment Architecture 06-10-2019 0 2	0	2
How can I connect two Splunk silos together ? hi, I have two teams each running their Splunk deployments and I need to have a centralized manner and woud like to b... by barriersbill Explorer in Deployment Architecture 06-09-2019 1 1	1	1
How to create new indexes in Splunk Hi, I need to create new indexes from the view in a data warehouse. I need to create that in Splunk using its GUI it... by umsundar2015 Path Finder in Deployment Architecture 06-07-2019 0 6	0	6
How to tear down a search head cluster? Good evening all. I would like to know exactly how to properly tear down a search head cluster. I am rebuilding / upg... by mgiddens Path Finder in Deployment Architecture 06-07-2019 1 2	1	2
Setting up a python virtual environment for developing Splunk applications I am new to Splunk and want to write my own MLTK classes/functions. I want to test my code locally in Anaconda or PyC... by thorsten_osaka Engager in Deployment Architecture 06-06-2019 0 3	0	3
How to force splunk to communicate over a specific outbound ip? Hi all, is it possible to force splunk to use a specific ip for outbound traffic, like reaching a SHC captain. We ha... by huszti21 Explorer in Deployment Architecture 06-06-2019 0 0	0	0
When editing app properties in my Splunk SHC as an admin, why am I getting a "You do not have permissions to edit this configuration." banner? (creating this to answer) Details: Search Head Cluster (SHC) v6.5.2 Logged in as admin When going to manage apps ... by tnerpel_splunk Splunk Employee in Deployment Architecture 06-05-2019 1 4	1	4