Hi,
I'm having some architecture deployment issues on an indexer. When I check hosts using (index="_internal" | stats count by host). I double-checked my outputs.conf on all my instanc...
...riginal installation was a clone or a copy of the splunk folder so both instances have the same GUID (Instance ID)
The Deployment Server is noticing this:
WARN ClientSessionsManager - Client with I...
Hi Team, I have below row logs: 2023-08-30 07:43:28.671 [INFO ] [Thread-18] ReadFileImpl - ebnc event balanced successfully My current query: index="abc" sourcetype =600000304_gg_abs_ipc2 source=...
Hi,
In a distributed system, We have multiple Splunk Instances(License Master, Search Head and Master Node) which are not in use now.
I am now looking to reuse those instances to create a SH c...
I found this Index and Forward data into another splunk instance and then found the current version of the referenced documentation: Documentation - Splunk® Enterprise - F...
...eed to upgrade the KVstore on instances with active KVstore collections. And I should stop scheduled searches writing to collections or wait until they are finished before running the m...
Hello, I am running multiple Splunk instances on the same machine, located in /opt as follows: /opt/splunk1 /opt/splunk2 /opt/splunk3 ... etc I need to upgrade Splunk Enterprise to a newer v...
Hi, everyone. I am new to Splunk. I have an environment with 3 nodes indexer cluster + cm + Search Head. I am wondering which instance I should send my request to when using REST API? I h...