Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
153 results
Sort by:
05-23-2019
11:29 PM
We have a single Search Head Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a Search Head cluster...
11-02-2015
02:51 PM
1 Karma
...nly one "active"/searchable copy is available at any time.
In a multisite indexer cluster, the search affinity allows for replication of the active portion of the searchable data, so that each site c...
10-13-2016
04:34 AM
...t;- also add the deployer role to the index cluster master?
2: if no to No.1 do I create 3x new nodes as search heads, then create the search head cluster and a separate deployer node - if so, how...
- Tags:
- splunk-enterprise
06-13-2019
01:22 AM
Hello! We need to implement architecture ES Splunk to 400 GB in clustering (SH, IDX). How we should to count numbers of idx for this capacity? In Splunk docs recommend to use per indexer up to 1...
Labels
- Labels:
-
configuration
10-26-2017
10:34 AM
I am planing a Splunk upgrade, master and search head cluster are on 7.0 but next step is to upgrade multisite Indexer cluster, since we are critical on downtime. All Indexers are at same 6.4.*
C...
02-09-2015
11:03 AM
1 Karma
Hello. Splunk 6.2.1. Built a single-site index cluster. Two search heads. I can create test indexes across the cluster by editing indexes.conf on the cluster-master, then deploying a config bundle. Works...
08-10-2020
09:12 AM
Hi All, We have a summary indexing configured on Splunk search head(one of the search head in cluster which forwards the data to indexer layer). All the summary indexing jobs will work perfectly f...
- Tags:
- summary indexing
Labels
- Labels:
-
search head
09-07-2018
10:32 AM
Hi!
i have an indexer on server_A and a search head on server_B
there is an index=test_ind on server_A
i run a search on server_B (search head) to collect some data to test_in to s...
06-01-2016
08:22 AM
...or dev purposes and I created my props/transforms for this log file and got it working just fine. However, when I deploy it across my cluster and attempt to index these files in production, I am not g...
12-19-2022
07:14 AM
...oncurrent searches on an indexer peer goes well above the max concurrent searches (twice the limit). That indexer cluster has default limits.conf.
Labels
- Labels:
-
search peer
