Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
20 results
Sorted by:
11-23-2017
05:17 PM
1 Karma
Hi All,
I am trying to put one of our Cluster indexer peers into manual detention and i get a boolean error:
CLI:
\bin>splunk edit cluster-config -manual_detention on_ports_enabled
E...
08-20-2020
12:20 PM
My cluster has IDXs going in and out of detention very quickly (only a couple of seconds of detention). I see messages on the CM like the following: 08-20-2020 08:35:00.682 -0700 INFO CMPeer - peer...
Labels
05-05-2018
12:33 PM
...ersist. Check for network connectivity from the cluster peer reporting this issue to the replication port of target peer. If this condition persists, you can temporarily put that peer in manual detention....
- Tags:
- splunk-enterprise
02-26-2019
02:39 AM
Hi,
We had put one of our Peers/Indexers (Lets name it IDX2) into manual detention using the command below:
Run in IDX2
/opt/splunk/bin/splunk edit cluster-config -manual_detention on
A...
10-07-2021
11:50 AM
Hi All, We are embarking on moving our Splunk 8.1.3 servers from old version of RHEL to new RHEL servers. The servers names are going to be different and we currently have the config based on IP/h...
Labels
- Labels:
-
indexer
07-22-2020
04:20 AM
...wo new indexer peers to the existing cluster. So for the moment we have 4 indexer nodes in production. The main goal should be to leave only the 2 new indexers up and running. I have read in another t...
Labels
- Labels:
-
indexer clustering
09-07-2017
02:00 AM
So looking at the docs moving the index buckets is generally how you move data. However, I'm migrating a lot of data from multiple servers to one server and apparently moving the index buckets will b...
Labels
- Labels:
-
other
03-03-2019
03:35 AM
current Splunk architecture:
a standalone search head + an indexer cluster (contains three indexers)+ a cluster master node
I want to convert it into a distributed search with a search h...
- Tags:
- splunk-enterprise
12-05-2018
03:04 AM
1 Karma
...ite.
I need to decommission 60 indexers (30 from each site). The plan is to put the 60 indexers in detention mode and make one peer offline by using enforce counts at a time.
In order to r...
