We are trying to test out the new "cascading" option for the knowledgebundlereplication policy. We have sat the replication policy on the search head to "cascading" in d...
I'm considering a Splunk cluster setup, where the Search Heads and Indexers (Peers) will be managed using mountedknowledgebundles. Is there a way to also configure the Forwarders to use the same m...
...r should I do something like create a local NFS mount to East Coast and use a copy process (cron job and rsync job or SAN replication,etc) to copy the knowledgebundle from West Coast to East?
...hat needs to be replicated to the 3 IDXs (for filtering purposes). It seems that we are having issues with the replication of the KnowledgeBundle, as we are getting this error on the SHs (while r...
We have very large deployment of Splunk and have been using Search lead Pooling along with Mountedbundle in 6.x (Pre- 6.2), Now we are planning to move away from Search head Pooling to Search Head C...
...istributedBundleReplicationManager - bundlereplication to 24 peer(s) took too long (18564ms), bundle file size=13950KB, replication_id=1354804280
11-26-2012 19:42:29.211 +0000 WARN D...
Hi,
I'm looking for some answer and suggestion how I could decrease/workaround the knowledgebundlereplication errors we're seeing in our environment which is a multi site indexer clustering w...
Hi,
I'm about to implement search head pooling and probably also mountedknowledgebundles. I'm interested in what this will mean for the searches. Having read the documentation, I understand t...
we are running with splunk V4 with search peers 4 indexer are connected to 1 SH , when im trying to search particular keyword it is just
giving error for particular node only node sure what is th...
We're in the situation that we need to have lookup tables that are larger than the 2gb bundle size.
For example, creating a lookup table for the Ironport logs with "mid,mailfrom,mailto,subject" f...