Dear All,
We have one production search head, three indexers clustered, a cluster master, and a deployment server. All running Windows 2k8 R2. Splunk version is 6.1.3
We planned to get data f...
...ut now the issue is when I corrected the index for them to send to it created duplicate hosts that stopped sending to main. How do I remove the stale hosts and will this affect the data?
I'm seeing the error below under messages in my Splunk enterprise console:
Missing or malformed messages.conf stanza for TCPOUT:FORWARDING_BLOCKED_Indexer IP ADDress_default-autolb-group DC-Host N...
...ast Connect Time:2020-09-14T20:04:01.000+00:00; Failed 1 out of 1 times. If I delete the distributed search head and attempt to re-validate it, I get the error: Encountered the following error while t...
...oo
to list object foo of type widget: services/.../widgets/foo
to edit object foo of type widget: services/.../widgets/foo -d someAttr=someVal -X POST
to delete object foo of type widget: s...
...the KPI from Service A anddeleteand recreate the KPI on Service B, Service B will now correctly show only its matched entities
If I re-add the KPI to Service A, Service B will again show b...
...ystem with an existing Splunk universal forwarder that is using default port settings. By default, the universal forwarder uses port 8088 for the HTTP event collector (HEC) and port 8089 for t...