I'm running Splunk Enterprise 8.0.5 on Windows 2016 and looking to upgrade to 8.2.3. We run the following: 2 indexers 1 Searchhead 1 Master Node [Cluster Master, Deployment Server and License M...
Hi,
I would like backup a "searchhead" in one cluster (The folder splunk/etc/). The searchhead is under linux with specific user for run backup.
For that, i used a script in bash.
This s...
I'm seeing the error below under messages in my Splunk enterprise console:
Missing or malformed messages.conf stanza for TCPOUT:FORWARDING_BLOCKED_Indexer IP ADDress_default-autolb-group DC-Host N...
A scheduler issue may be described as: - reduced number of completed scheduled searches running during certain periods - scheduler locks upand doesn’t run any scheduled searches for a period of t...
...ommunication with KVStore. See splunkd.log for details. ..
When I removed the searchhead from Cluster
1. Took backup and clean the kv-store andrestore the backup, the kv-store status has become "Ready". B...
I need details about what to check before I upgrade so I know if my deployment is ready to upgrade. What do I monitor, and how do I benchmark system health before the upgrade?
I need details about what to validate after the upgrade so I know it was successful. How can I tell that everything got upgraded correctly, and that the system is healthy and ready to go?
After performing "./splunk clean all" on one of the searchhead, we are having issue to add the searchheadback to the searchheadcluster.
Permission error message is reported when adding t...
I have 1 Master, 1 SearchHeadand 3 Index peers in my cluster.
What is the Correct process for creating new indexes?
I understand I can create the indexes.conf file on the master in master-a...
Hi, I am trying to setup RSA authentication on our searchheadcluster, I was doing this via the Web Gui but i seem to have locked myself out, Any idea where the configuration file i...