Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
56 results
Sorted by:
05-23-2019
11:29 PM
We have a single Search Head Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a Search Head cluster...
10-30-2015
10:14 AM
...low, I am preparing for the future.
We can pump up the specs on the Search Head, or create a new Search Head. How do I decide which will work best? Another SH seems like it might add complexity, b...
10-19-2015
03:05 PM
2 Karma
I am adding a new search head to the existing search head cluster. I want to add the same users to the new search head, from my LDAP. If I copy the authorize.conf & authorization.conf, will it a...
10-13-2016
04:34 AM
...: am i able to use 3 search head nodes that are already pointing the the back-end index cluster and then just run the commands to add these members to the search head cluster (and elect a captain) &l...
- Tags:
- splunk-enterprise
10-05-2015
09:45 AM
1 Karma
I wish to uninstall an app from my Search Head cluster and cluster peers. Is this the following the way to go about it?
On each Search Head and peer cluster member:
1.Run the following c...
05-19-2016
06:08 AM
...uggestions?
EDIT: I forgot to mention that if I manually go to each search head and add the appOrder parameter to the standard user-prefs app, then it works. I just would like to do it centrally from the d...
01-30-2017
08:53 AM
I would like to enable to search assistant on my Search Head Cluster. The documentation recommends an edit to the file user-prefs.conf.spec.in. (Is this a bad idea?)
Described here:
https://d...
05-05-2016
05:55 AM
I've been setting up the Splunk for Windows Infrastructure app on my search head cluster. In the instructions it says to add the winfra-admin role to a user. In authorize.conf in $SPLUNK_HOME/etc/s...
05-09-2018
09:24 AM
...ttempt to search using both the strong and weak search head and slow me down?
What it comes down to is that I do not need the full "cluster", I just need to keep my user data replicated. It seems t...
07-06-2021
12:26 PM
...r notable event data to a 3rd party app when a saved search is matched. Our Add-on ships 2 saved searches for users to use to verify that the add-on is configured properly with the 3rd party app. On s...
