I am having problems blacklisting a sourcefile from being indexed.
We currently run version 4.3 and deployconfigurationsto a number of remote universal forwarders.
By default, our u...
I have one deployment server to service 4 HFs and 1 deployer to service 3 SHs in cluster.
What is the best way to push/deployconfigurations/apps to HFs and SHs?
Also, for some reason, I d...
All along we spoke about bundles on the indexers and SHs, but yesterday my colleague mentioned to me that they are used also with the forwarders. I believe the bundles reside at C:\opt\splunk\s...
I am deploying universal forwarders with a bash script that is based on the sample script in http://docs.splunk.com/Documentation/Splunk/6.2.1/Forwarding/R...
I just set up 2 indexers and 1 search head. I need to use a deployment server to manage and deployconfigurations across my universal forwarder. Do I need to set up the search head as my deployment s...
...anagement will that cause any issues with already existed forwarders that have some custom stanza's in their inputs.conf (so resetting to a default state or to the state present on the deployment server). O...
I'm about todeployseveral Universal Forwarders and in the installation procedure I'm planning to include one step to change the default admin password.
Afterwards, can a Deployment Server s...
Dear All,
I have a Search Head and Two non-clustered indexers (search peers) and I am architecting the system to include a Deployment Server and severalForwarders.
I know that you must not u...