Deployment Architecture

Community Activity

Install splunk forwarder on Linux server Hi splunker; When I install splunk forwarder version 7.2.6 on redhat server version 7.4 successfully installed, but ... by aalhabbash1 Path Finder in Deployment Architecture 05-21-2019 0 4	0	4
All-In-One configuration and clustering Dear Community, We have the following question : In the 'all-in-one' configuration (1 server holding : Forwarder+In... by gladieu1 Explorer in Deployment Architecture 05-21-2019 0 3	0	3
What is the difference between frozen bucket and thawed bucket? What is the difference between frozen bucket and thawed bucket? Can any one explain or share the link? by Madhan45 Path Finder in Deployment Architecture 05-21-2019 0 6	0	6
[Cluster] Are standalone buckets considered for re-balancing the data across Clustered indexer. Can you point us towards best practices/docs for creating new Indexers and connecting them to an existing Cluster Mas... by rbal_splunk Splunk Employee in Deployment Architecture 05-20-2019 0 2	0	2
Why is a Splunk forwarder creating a zombie process when starting via systemd? I have installed version 7.2.4 of the Splunk Forwarder from the deb package on a x64 Ubuntu 18.04.1 LTS system. Afte... by rayrayrayray New Member in Deployment Architecture 05-20-2019 0 3	0	3
Splunk Distributed search peer not working as expected. There are multiple errors logs Hi All, We have 4 search head (non clustered) and 16 search peers (non clustered) . Each search head points to all 1... by umeshagarwal008 Explorer in Deployment Architecture 05-18-2019 0 16	0	16
How to know if my splunk enterprise has forwarders installed Hey everyone, I am pretty new to splunk and our organization has Upgraded Splunk enterprise version of 7.2.6 and the... by amanaganti95 New Member in Deployment Architecture 05-18-2019 0 2	0	2
DB connect – JAVA_HOME path not exist error i have installed db connect on a SHC via the deployer. The jdk1.1.8.0_131 is installed on the deployer in the /opt/s... by kcooper Communicator in Deployment Architecture 05-17-2019 0 1	0	1
Validating Cluster Bundle incorrectly labeling bundle as not requiring a restart I just stood up a brand new multi-site cluster on Splunk 7.2.4 and while I was pushing out the very first of my confi... by j4adam Communicator in Deployment Architecture 05-17-2019 0 1	0	1
Which works best in a SHC? Even or Odd number of search heads to avoid the SHC Service becoming not available? I had a multi-site SHC with 1 SH on one end and 3 SHs on the other end. Documents I find recommends an odd number at ... by rholm01 Explorer in Deployment Architecture 05-17-2019 0 2	0	2
SQL Server ERRORLOG i'm new to splunk i'm having the same issue as https://answers.splunk.com/answers/24484/sql-server-errorlog.html#answ... by aalbaker New Member in Deployment Architecture 05-17-2019 0 0	0	0
How can we use deployment server in multi sites? Hello Team, We need to set multi sites cluster with indexer clusters and search head clusters, and want to use deplo... by lmjoin Explorer in Deployment Architecture 05-16-2019 0 11	0	11
Distributing scripts using deployment server Hi Splunkers, Need help with a deployment server concept. Referred splunk docs and few similiar answers, still i'm mi... by meenuvn Explorer in Deployment Architecture 05-16-2019 0 5	0	5
How do you configure weblogic with Splunk? Hi, Can you please let me know how to integrate weblogic with splunk 7.2 Thanks, Swathi by manekar New Member in Deployment Architecture 05-16-2019 0 7	0	7
Finding the earliestTime and latestTime of hot/warm/cold buckets I'm unclear if this is the correct way to go about finding the earliest/latest event time in a bucket. \| dbinspect ... by nivin0910 Engager in Deployment Architecture 05-15-2019 0 0	0	0
error in clustering and replication Hello, I am getting the following error in my deployment server or Cluster master. Eventhough ouputs.conf is correc... by satyaallaparthi Communicator in Deployment Architecture 05-14-2019 0 5	0	5
Custom conf files replication in search head cluster I've one App which has Add-on builder created configuration page with API key, proxy settings, etc. This configuratio... by VatsalJagani SplunkTrust in Deployment Architecture 05-13-2019 1 3	1	3
Do big implementations break down the serverclass.conf into multiple files? We wonder if it makes sense to break down the serverclass.conf into multiple smaller files. As it grows into five or... by ddrillic Ultra Champion in Deployment Architecture 05-13-2019 1 2	1	2
Unable to push SHC bundle from Deployer to SHC members Everytime I put the below command to push the bundle, C:\Windows\system32>splunk apply shcluster-bundle --answer-yes... by damode Motivator in Deployment Architecture 05-13-2019 0 3	0	3
Stuck Cluster fixup task: 'change bucket error' I've recently reconfigured our index cluster from single site to multi site. All the bucket fixup tasks have complete... by LeeSart Explorer in Deployment Architecture 05-13-2019 0 2	0	2
Processing Microsoft multi-factor authentication server logs I am injecting logs from Microsoft multi-factor authentication server. Unfortunately, the log entries are rather inc... by ageld Path Finder in Deployment Architecture 05-13-2019 0 0	0	0
Splunk Data Flow Architecture diagram Hi Splunkers..I need Splunk components Data flow diagram and how are they communicating each other. Can someone plea... by ramprakash Explorer in Deployment Architecture 05-13-2019 0 1	0	1
"Error reading compressed journal while streaming: gzip data truncated". Are my Hadoop archived buckets corrupted, and how do I fix it? While running a query via EMR on a bucket archived to s3 with hadoop data roll, I got the following error: [hadoop] ... by heroku_curzonj Explorer in Deployment Architecture 05-13-2019 0 5	0	5
XX events missing due to corrupt or expired remote artifacts from search head Hello guys, I can see some errors from clustered search head : "events missing due to corrupt or expired remote arti... by splunkreal Motivator in Deployment Architecture 05-13-2019 0 0	0	0
Splunk_TA_stream - deployment server install failure - file is in use by another process We have deployed Splunk_TA_stream to our Windows domain controllers. We made a change so the app is trying to redeplo... by jswilmoth Engager in Deployment Architecture 05-09-2019 0 1	0	1