...ne out of 12 indexes shows with Searchable and Replicated Data Copies (the rest seem fine)
Under "IndexerClustering: ServiceActivity", "Snapshots" - a number of "pending" tasks that seem to be s...
...actor met. Crashing Indexers made "out of sync" pretty common, but HOURS of Replication activity was unable to bring the Indexers back in sync. Most common cause of delayed fixups were "bucket has not r...
I found that Splunk Monitor System health can check health of Splunk and check if it's monitoring or not. However, i wasn't able to use it with my current license. So, is there another way to check i...
Hi -
We have the Splunk Add-on for Microsoft Cloud Services installed and are currently collecting Azure "Activity Logs" into Splunk.
However, we'd also like to capture the Azure (portal.azure...
Hi All,
Recently i upgraded my standalone env to SH and Indexercluster one major thing i notice is all my previous works like Services,entities,correlation search,notable event aggregation p...
Hello.
I have a 2 node indexercluster and all data is searchable. However I cannot get the search factor or replication factor to resolve due to, what appears to be, a single bucket.
When I l...
Hello all - hope someone can tell me if the following is a good idea.
I have to upgrade an Indexercluster and search heads from 6.1.2 to 6.2.4 without losing data sent from any forwarder during t...
Hi, ive got a task to do but im complete newbie in splunk. So could you guys help me? I have to send to splunk logs which have names like this " Crif.mc.Loader.log.2020-11-10" and every day it mak...
...WS maintenance activity for the Cluster Master Splunk server instance (AWS EC2).
Can you share with us, what would be the impact on peer nodes, or on the IndexerClustering tier as a whole? Or w...