...dministrate the Splunk indexer cluster.
My questions are
a) is it OK to roll out the same indexes.conf to all indexer peers via configuration management tool rather than indexer master?
b) It s...
...ot use deployment server or forwarder management to manageconfiguration files acrosspeer nodes (indexers) in an indexer cluster. Instead, use the configuration bundle method. You can, however, use t...
I am trying to set up HEC in a cluster, but the cluster members do not seem to be listening on the port I have designated, 8088 via the web interface.
$ nmap -p 8088 splunk01.s2prod
Star...
...ownloaded from master nor managed by local deployment client. Either define this index at the master or specify repFactor=0 on peer to skip replication.
[Critical] App='system' with replicated index='_...
...bove and use "same" forwarder certificate acrossall forwarders or have 1 certificate per app ?
4. If we manage the Forwarders configurations via Deployment Server, is it a good practice to enable S...
...he clients and we will use the configuration bundle method to push apps to the peer nodes so this DS instance will have dual duties.
More clearly, Config apps will be deployed from deployment -apps d...
...HC individually and manually add the Search Peers. Not a problem - but not exactly centrally managed and it would be possible to miss one on a given SH if you are not careful or had a lot of indexers....
Hi I am creating a new environment including around 300 Linux machines and around 50 Windows servers.I will be installing Universal forwarders to forward the data to Central Indexers.
How can I ca...