...plunk. Once that was changed we could launch Splunk, and then received the errors.
Originally we were using ADFS for SSO and it worked fine, but now when going to the site we get the error, "IDP f...
Hi, two questions One : In our environment we have got a multi site cluster with multiple peers. In the bucket status we have got much errors which the fixe up reason "change masks f...
Hi all,
I'm actually have to decomission 6 indexers on a 9/9 multi site cluster of indexers.
The command passed :
splunk offline --enforce-counts
3 days have passed, and im still having a l...
Hi, I have distrubuted setup. Each site has 1 indexer /1 search head & 1 master server. They are part of cluster. One of the indexer from other site was down for more than 48 hours. N...
...he sites.
Also can HTTP status codes can be used to detect attacks? and how can standard deviation be used in identifying the attack.
Thanks
Kishore
...he site_search_factor above.
I suppose the first thing I should say is that I'm getting my information from the splunk show cluster-status --verbose command or from the cluster settings page on t...
Hi all, Im under Splunk Version 9.0.2. After decomissionning one indexer in a multi site clustering, I cant retrieve my SF / RP. A Rolling restart and CM restart (splunkd) had no effect. G...
Hi,
Is there a way to verify what the primality status (whether the bucket is primary) and the site affinity of a multisite bucket?
Where are those values stored relative to the bucket?
...o "Force" flag, no "Site Order" flag) and some of my Indexers were stuck with Status Restarting. Never happened before. Here below some logs, as you can see the fist Indexer (Site 2 - IDX03) r...
...020 x86_64 x86_64 x86_64 GNU/Linux root@sekar:/opt/splunk/var/log/splunk# install went fine, service is running fine as well.. root@sekar:/opt/splunk/bin# ./splunk status splunkd is running (P...