Hi, I am trying to deploy a new index to my indexer cluster via the Cluster Master and have followed the usual documentation on how to deploy via the Master-Apps Folder. I have done this before a...
I Have Splunk Enterprise (Windows) single entity and the indexes are in the 😧 drive and it is full and I have added new desk F: drive
I want to move my indexes to the new drive do I need to...
I am installing a newSplunk server on Windows using the trial subscription for now, which may be changed to the free license later. I have data from another Splunk for Windows server t...
...on the old server 3 Copy old configs tonew server ?? <<< which configs? is there a check list documented somewhere 4 Start newSplunk server and verify I could go thru e...
Hello, How to change the permissions of the knowledge objects(ex., dashboards, alerts) on the splunk cloud search head to a new user since the previous owner who created those is no longer with t...
...Enterprise on the new instance. - Log into Splunk Enterprise and confirm that your data is intact by searching it - Upgrade from 7.3.X to 8.1.X and then to 8.2.5 Should I apply these steps to e...
Good Afternoon, I'm newtoSplunk. They just set up the Splunk in my environment and as an analyst, I need to know it in other to perform my daily activities. Please, where can I begin learning Splunk...
...arget="_blank">
<set token="drilldown_srch">index=_internal status=* sourcetype=splunkd |lookup test12.csv name as status output value | where value=$row.value$</set>
<link>s...
Splunk offline --enforce-count or data rebalance which one is better in case of migrating tonew hardware and do i have to add peer to manual detention in indexer cluster before running a data r...