Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
40 results
Sorted by:
04-03-2015
03:16 PM
...n the "Best practice: Forward search head data to the indexer layer (http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/Forwardsearchheaddata) documentation step 1. which states:
Make s...
03-23-2017
12:50 PM
...index. Additionally the search head complains that it received an event for an unconfigured/disabled/deleted index=foo like it is attempting to write the data locally.
What do I need to do to the...
- Tags:
- splunk-enterprise
11-18-2016
12:30 AM
...is waiting for input" message.
I didn't register indexers to the distributed search peers of DMC because the indexers are clustered.
I didn't embed DMC function in cluster master.
By the w...
01-14-2016
07:34 AM
...nvironment with one search head, two clustered indexers, a Deployment Server/Cluster Master and a Heavy Forwarder.
When I look at the _internal index from the Search Head, I see data from all of the h...
09-10-2019
10:39 AM
I need details about what to validate after the upgrade so I know it was successful. How can I tell that everything got upgraded correctly, and that the system is healthy and ready to go?
Labels
- Labels:
-
upgrade
09-10-2019
10:18 AM
I need details about what to check before I upgrade so I know if my deployment is ready to upgrade. What do I monitor, and how do I benchmark system health before the upgrade?
Labels
- Labels:
-
upgrade
10-29-2019
01:11 PM
1 Karma
...p a monitoring console on the license master and changed it to distributed mode.
I can see my indexers there, but I don't see my search heads.
I followed the documentation and went to S...
01-16-2019
12:16 PM
What are best practices for deploying the Splunk Add-on for Unix and Linux in a distributed environment?
Any "gotchas" or good-to-know practices to get ahead of common issues? Consider this an a...
04-07-2017
02:47 AM
...nd forwarding the data to the search peers (indexers) by configuring the output.conf. So should I create the index on the search peers (indexers) OR Search head cluster members OR Search head Captain f...
- Tags:
- splunk-enterprise
07-07-2017
09:07 AM
I'm seeing some curious behavior our of two of my heavy forwarders. They aren't reporting data into _internal, but I am seeing app data from things I have installed on them. I checked out the logs o...
