Hi,
I'm running a 4 node searchheadcluster where one searchhead is down due to hardware problems. When trying to deploy configurations to the SHC from the deployer, I get the following m...
We've got a 3 indexer - 3 searchhead setup on 6.2.4 using indexer clustering, searchheadclustering, and adeployer to configure searchheads.
I've got a scripted input that reaches out for d...
Regards,
I wonder if it is possible to perform an incremental deployment of applications in Splunk, that is, only deploya single application without Deployer having to overwrite all existing applications?
In searchheadclustering you use adeployer instance to push apps to the searchheadcluster members using the command:
$SPLUNK_HOME/bin:
./splunkapply shcluster-bundle -target https://10.10...
I need to Script the entire installation of the various instances of Splunk to include the Cluster Master, Deployment/Deployer, Searchheads, indexers, and forwarders.
Hi,
I am trying to simulate acluster environment for the SplunkApp for Enterprise Security. The setup is:
-Two Indexers in acluster with Rep Factor =2 , search factor=2
-One searchhead f...
...ata is in the Searchapp
I then went ahead and updated my props.conf and transforms.conf in my $SPLUNK_ROOT/etc/apps/search/local
props.conf
[dmwt:xml]
REPORT-myXmlClassName = x...
...unning an environment with the following SearchHead (Windows Server 2019) Indexer 1 (CentOS Stream 9) Indexer 2 (CentOS Stream 9) Indexer 3 CentOS Stream 9) CPU 48 C...
Hi all, I built a dedicated SearchHeadCluster with 3 members and adeployer to load and test how DB Connect works in a shcluster. Splunk Enterprise 9.1.2 and DB Connect 3.15.1. The c...
...iles under local subdirectory in the SPLUNK_HOME/etc/shcluster/apps/{apps}/local/. Also checked the pass4Symmkey in the server.conf under /opt/splunk/etc/system/local/ on the searchheaddeployand on t...