Installation

Discussions

Thread Info

Why doesn't the new 50gb Dev License support being a remote master?

Hello, I have a distributed dev environment that matches very closely to our production environment. This is a ver...

by Path Finder in

How do I find the source of indexed data volume?

I am investigating Splunk for use with a new operational solution, but I seem to keep hitting the trial index limits ...

by Explorer in

Is there a checklist for upgrading Splunk including post-validation checks?

Does anyone have a checklist (or know a link for one) for upgrading Splunk, more specifically post-validation checks?

by New Member in

Splunk 6.5. Issue with Sort and Fields like commands

Hello Team, We have dashboards with queries containing commands like sort - and fields - , what we found after upg...

by Explorer in

How to create a search to investigate source of over-limit license usage?

I have received a message saying today that my license using is nearly 3 times my limit. I cannot find anything in pa...

by Path Finder in

Strange license pool warning

I was looking at Manager -> Licensing this morning and I have this warning: 1 pool warning reported by 1 indexer ...

by Motivator in

I upgraded to Splunk 6.2.2 and now get errors with Splunk App for Nix and Windows.

I now get these messages when the indexers start up: Checking filesystem compatibility... Done Checking con...

by Explorer in

What is the minimum screen resolution for Splunk 6.5.0 to run?

Installed Splunk Enterprise 6.5.0 on a Windows Server 2012 (VMware). Received error on startup: "This app can't op...

by New Member in

problem with installing splunk enterprise on centos

Dear all hello about one week a go I insatalled and used splunk light without any problem. but yesterday I wan...

by New Member in

Failing to add a license-slave to a license-master since Splunk 6: invalid signature on request

I have a license-master on splunk 6.2.1, and try to connect a new license-slave to it, but get the following error: ...

by Splunk Employee in

How to reset a license warning to avoid a license violation?

Hello all.We have a little trouble with our license. We paid for a new license and are waiting for a new file at t...

by Communicator in

Setup slave Splunk server cant connect to master

ERROR:Bad Request — In handler 'localslave': editTracker failed, reason='unable to contact master=https://:8000' t...

by Contributor in

Can I upgrade my Linux system to RHEL 7 without upgrading Splunk from 6.1.4

I'm planning on migrating to another X86 box which is running RHEL 7. I am currently running Splunk 6.1.4 Enterprise ...

by Motivator in

Master License Server and how to control Slaves?

We have got a main "Splunk License Server " with few slaves connecting to it.As part of automation, whenever slaves a...

by Super Champion in

How to create a licensing report that tracks usage rates?

Hi, We decided to centralize all of our Splunk licensing, and my group is now responsible for it (yay, us?). So, w...

by Champion in

Hardware recommendation for high log volume Splunk deployments to optimize performance and provide indexer replication?

Hi, I read the Splunk documents available at: http://docs.splunk.com/Documentation/Splunk/6.1.2/Deploy/Deployme...

by Influencer in

Is there a way to craft a wget URL to download any given app?

I'm looking for wget URL for apps. Is there a way to craft a URL to wget/download any given app?

by New Member in

Is there a way to update the slave_name when connecting to the license master?

Hi, I'm wondering if there's a way to update the slave_name when connecting to the license master. My slave_name i...

by Explorer in

When upgrading from 6.4.0 to 6.5.0, why do I get error "rmdir: failed to remove `/opt/splunk': Device or resource busy"?

When upgrading from Splunk 6.4.0 to 6.5.0, I am getting below error: $sudo rpm -U /tmp/splunk-6.5.0-59c8927def0f-l...

by New Member in

Where is the indexname in the license usage log entries (upgrading from 6.1 to 6.4.1)?

Hi, We went from 6.1 to 6.4.1 recently, and noticed that the index that is reporting the license information is no...

by Champion in

Does a universal forwarder need a license stanza?

Hi, Does a universal forwarder need any type of licensing stanza? I see this in the default server.conf entry: ...

by Champion in

after upgrade to 6.4.4 im getting errors "[indexers] splunk Search time modifiers are ignored in real-time searches"

how can i re-enable real time searches? We lock it down by user role so this should not be happening.

by Contributor in

Hi i need to do splunk up gradation. My splunk version is 6.3.1 i need to upgrade to 6.5. what procedure i need to follow.

I have 1 main index Node, 1 search node and 3 index node. Mainly 5 different types of logs we are fetching on 3 index...

by Explorer in

Index size over 90%

My indexes on several of my indexers is over 90%. Yes, I could increase the size, but you can only do that so much. I...

by Engager in

Where can I download Splunk Demonstration Videos to play offline?

I need to download a short Demo / Splunk commercial that we can play on a loop at our vendor booth.

by New Member in

Get Updates on the Splunk Community!

Installation

Discussions

Why doesn't the new 50gb Dev License support being a remote master?

How do I find the source of indexed data volume?

Is there a checklist for upgrading Splunk including post-validation checks?

Splunk 6.5. Issue with Sort and Fields like commands

How to create a search to investigate source of over-limit license usage?

Strange license pool warning

I upgraded to Splunk 6.2.2 and now get errors with Splunk App for Nix and Windows.

What is the minimum screen resolution for Splunk 6.5.0 to run?

problem with installing splunk enterprise on centos

Failing to add a license-slave to a license-master since Splunk 6: invalid signature on request

How to reset a license warning to avoid a license violation?

Setup slave Splunk server cant connect to master

Can I upgrade my Linux system to RHEL 7 without upgrading Splunk from 6.1.4

Master License Server and how to control Slaves?

How to create a licensing report that tracks usage rates?

Hardware recommendation for high log volume Splunk deployments to optimize performance and provide indexer replication?

Is there a way to craft a wget URL to download any given app?

Is there a way to update the slave_name when connecting to the license master?

When upgrading from 6.4.0 to 6.5.0, why do I get error "rmdir: failed to remove `/opt/splunk': Device or resource busy"?

Where is the indexname in the license usage log entries (upgrading from 6.1 to 6.4.1)?

Does a universal forwarder need a license stanza?

after upgrade to 6.4.4 im getting errors "[indexers] splunk Search time modifiers are ignored in real-time searches"

Hi i need to do splunk up gradation. My splunk version is 6.3.1 i need to upgrade to 6.5. what procedure i need to follow.

Index size over 90%

Where can I download Splunk Demonstration Videos to play offline?

Customer Experience | Splunk 2024: New Onboarding Resources

Celebrate CX Day with Splunk: Take our interactive quiz, join our LinkedIn Live ...

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

Splunk ES 502 Error on Signup Page

Splunk Obsservability not showing host and the ngi...

null

Splunk OpenTelemetry Collector v0.104 compatibilty...

After migration from Ubuntu to RHEL 9, certificate...