I have a few separate environments. For some, we use a Standalone SearchHead and for others, we use SearchHeadPooling. We need to plan and move these to SearchHead Clustering.
I am looking f...
I'm trying to setup searchheadpooling. I've followed the directions listed here
But when I startup splunkd I get an error. Here is the stack trace:
2011-03-22 12:28:43,565 ERROR [4...
...mplies it is possible:
If you want to use some of the more advanced features of distributed search, such as searchheadpooling or mounted bundles, you must edit distsearch.conf on the searchhead. F...
...y_index" sourcetype="my.sourcetype". However, no result is returned if I just entered sourcetype="my.sourcetype".
I suspect this has something to do with searchheadpooling but just wondered if a...
Greetz,
Must one use mounted bundles with searchheadpooling?
I would like to enable searchheadpooling with minimal effort to start testing in a production environment.
So, can we use 4.2...
Hi,
I'm wondering how Splunk (4.3.x) deals with new roles created through the GUI. Since they're located in etc/system, I suppose you have to distribute any changes by yourself, or is there a way ...
We have a dashboard that I would like to use tstats to generate the data, and run a search ever 2 minutes using tscollect.
The problem I have discovered is that since each searchhead in the pool...
...ollowed some instructions from Oracle on setting it up, still does not see it however, and most of what I can find seems to be for the Windows version.
Does anyone have any helpful hints, or run into s...
...thers, but if that storage is unavailable, then our searchhead HA is busted.
I really need searchheadpooling without the use of shared storage. Could the searchheads share info directly with each o...
Hi,
I need urgent assistance on upgrading Searchheadpooling. Mine is distributed environment(6.0.1) with below details
Two indexers(Clustered)
Two searchheads(SHP)
One Cluster m...