Hello community! I am looking at various configurations options for AWS BYOL running ES. We'll be leveraging SmartStore and just had a couple of questions on the architecture:
Are we b...
How to change the architecture from a single indexer to an indexer cluster with indexer management? I need an overview of what configuration files need to be changed to change the architecture from s...
When one configures the indexer cluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
...ow i can deploy smartstore in the two regions, which basically will have ind in region A connect to smartstore and ind in region B conn to smartstore in region B. Can you provide an example of this t...
Hi, I'm new to Splunk, trying to understand for Splunk we have 1 installation we need to customize it to work as Forwarder or Indexer or Search Head, So want to know which all files need to modify t...
Hi,
We have Splunk v. 6.3.3 multi site indexer cluster (8 indexers), 4 search heads, deployment server.
What's the best approach to backup policy?
1. Should we backup $SPLUNK_HOME/etc director...
...ooking the proper way to reconnect to the existing smartstore (s3 bucket path) and reset the cache manager to re-register all the contents again. Unfortunately I am not finding the documentation, w...
Hi,
We are currently looking into using the smartstore feature, however, I am having difficulty in finding documentation on how to calculate the amount of storage we would need - both local for t...
Hi
i am new to splunk and TH
I want to understand how can i check which all logs are being ingested in my clients splunk architecture
Also , is there a way i can l...