Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
99 results
Sorted by:
05-23-2019
11:29 PM
We have a single Search Head Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a Search Head cluster...
11-02-2015
02:51 PM
1 Karma
...nly one "active"/searchable copy is available at any time.
In a multisite indexer cluster, the search affinity allows for replication of the active portion of the searchable data, so that each site c...
07-13-2016
02:16 PM
...nvironment, I have an indexer cluster of 3 indexers, two independent search heads, and one Universal forwarder.
My question is where the BRO IDS app goes and how it works?
What I have done is - I have in...
12-28-2017
07:14 AM
Hello.
I'm running on RHEL 7 with 6.6.3 and an Indexer cluster (3 peers), and have 2 Search Heads not in a SHC but connected induvidually to the index cluster.
I try to use KV store with a c...
06-01-2016
08:22 AM
...or dev purposes and I created my props/transforms for this log file and got it working just fine. However, when I deploy it across my cluster and attempt to index these files in production, I am not g...
10-26-2017
10:34 AM
I am planing a Splunk upgrade, master and search head cluster are on 7.0 but next step is to upgrade multisite Indexer cluster, since we are critical on downtime. All Indexers are at same 6.4.*
C...
09-07-2018
10:32 AM
Hi!
i have an indexer on serverA and a search head on serverB
there is an index=testind on serverA
i run a search on serverB (search head) to collect some data to testin to server_B
b...
02-09-2015
11:03 AM
1 Karma
Hello. Splunk 6.2.1. Built a single-site index cluster. Two search heads. I can create test indexes across the cluster by editing indexes.conf on the cluster-master, then deploying a config bundle. Works...
02-02-2016
08:46 AM
2 Karma
...tried to restrict on one host value...ie. host=hostname. This isn't working either.
I am attempting this on a standalone search head in a distributed environment with an indexer cluster. I w...
