When I enable distributed mode on my cluster master all the indexer nodes are added to the peers list. However, When i try to edit server roles, or Apply Changes I get this error in the splunkd_ui_a...
...server Index cluster - 3 Indexer Deployment Server - 1server What are hardware requirement for DMC and configuration steps to monitor the rest of components(7 servers) in DMC. Please share us t...
...Console setupprerequisites" where it says,
Platform instrumentation must be enabled for every Splunk Enterprise instance that you intend to monitor, except forwarders. (that means P...
On a Windows Server when I go to Settings \ MonitoringConsole and launch it, there is a Menu item called: Forwarders: Instance which appears not to be configured and when I try to run setup I get t...
Hello, I have Splunk 8.0.2. My splunk instance is hosted in AWS and has 2 volumes (1 is root volume). What would be the appropriate alert query to trigger when disk is at 80% full? Thanks
...id I do wrong on cluster Master go to Settings \ DISTRIBUTED ENVIRONMENT \ Indexer Clustering - and here I can see all six indexers however when I go to Settings \ MonitorConsole \ I only s...
I inherited a splunk mesh of search-heads, deployment server, index cluster, etc. I am trying to figure out all this splunk stuff, but ran into an issue that I am not sure if it ignores best practice...
I need details about what to check before I upgrade so I know if my deployment is ready to upgrade. What do I monitor, and how do I benchmark system health before the upgrade?
We just got Splunk Enterprise up and running, and I'd like some tips on how to tell if it's healthy. Can you get me started, and point me to some resources?