Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
923 results
Sorted by:
01-22-2021
07:42 AM
I am looking to completely remove data from an Index after 30 days. Looking into utilizing "frozentimeperiodinsecs" to set the threshold but from what I've looked into this applies to an entire...
Labels
- Labels:
-
administration
-
configuration
06-02-2016
07:36 AM
1 Karma
...ike to monitor them all with the DMC.
The setup manual states that I have to configure each instance that I want to monitor as a search peer for the DMC. In another part of the manual (prerequisites...
04-06-2013
09:42 PM
What is the requirement for having a Light or Heavy Forwarder for the Checkpoint OPSEC LEA add-on?
Is it just so the the WebUI can be used to configure it?
If so, is there a way to bypass the W...
- Tags:
- forwarders
11-21-2020
12:08 PM
Hi All, I have one server in which DMC is configured, now my manager wanted to decommission this server and migrate DMC to another server. So is it possible to Migrate DMC to another s...
Labels
08-14-2020
10:50 AM
2 Karma
When running searches on the Monitoring Console, we are getting duplicates...Pretty much every result is doubled. Env: DMC + 10 SHs in SHC + 230 Indexers in Cluster (RF=3, SF=2...
Labels
- Labels:
-
configuration
-
other
04-30-2017
10:25 PM
I'm recently checking "health check" of DMC, but the following warning is being issued.
One or more non-indexer instances is not forwarding their events to the indexers. This can isolate s...
07-04-2016
10:36 AM
1 Karma
...ndexer-cluster worked fine. I'm able to monitor cluster-status in the dmc on the master.
Setting up the SH-Cluster didn't work out so well sadly. I get the following error trying to distribute s...
02-05-2019
01:44 PM
I recently added a new index in Splunk. I am running with 2 clustered indexes. The index is pulling in data, and shows up in DMC, Index > Indexes and Volumes: Deployment tab. However, it doesn't s...
09-23-2015
10:54 AM
1 Karma
...plunk04 - Indexer, Deployer (for search head cluster)
Splunk05 - Search Head Cluster Member
Splunk06 - Search Head Cluster Member
I am about to upgrade to Splunk 6.3 but I don't have DMC configured a...
Show results in replies (5)
-
I've read it, but based on that document it looks like I can't put my DMC anywhere in my e...
-
Oh, you're right. "Use of the instance should be limited to DMC and these specific functions." I...
-
Understood but I have a search head cluster and as per the docs "The DMC cannot be on a search h...
-
The documentation is clear: DMC should be it's own search head with no other functions and no h...
-
My recommendation: Provision a new machine with decent but modest specs (4 to 8 CPU cores, 8 to 12G...
02-13-2016
11:38 PM
Hi,
I am getting physical memory usage alert from my main Splunk server for the server itself where it is installed and as I have figured out splunkd, mongod and python (all three processes of Spl...
