Hello,
I have taken over a Splunk infrastructure from a colleague of mine, and I would like to verify that I have the current cluster key in my possession before the upgrade.
Is there any l...
Hello,
We have a Search head cluster in our environment and the person who set up the Deployer initially forgot the pass4SymmKey. Now , as a result, it's not letting me deploy content and throws t...
I'm trying to install a fresh install of Enterprise Security onto a search head cluster.
I uploaded the app via the GUI onto the shc deployer, but before I click start configuration p...
...he IX Cluster along with UFs etc.
I'm now at the stage where ES need to be installed, I have found the documentation to install a ES into a new implementation very minimal and confusing with r...
I am in a sandbox playing with indexer cluster server management. My end goal is to play with and set up indexer discovery, but am stuck on trying to add a 3rd indexer peer to an existing 2 node i...
...bundle (/opt/splunk/etc/master-apps/_cluster/local/) with only the clustering stanza and a single entry for the updated pass4SymmKey:
[clustering]
pass4SymmKey = myNewKeyPass
I did the s...
Keep getting this error after moving to SH cluster,
Please make sure that the pass4SymmKey setting in server.conf, under [general], is the same for the License Master and all its slaves from ip='1...
Hi All, I am investigating the possibility of consolidating our separate standalone ES Searchheads into a single clustered ES instance. Due to network segmentation rules, my indexer clusters will h...
Hi all,
I've got a couple of questions with regards to Enterprise Security, PCI and Search Head Clustering. We are initially going to be indexing 200GB/day but this will definitely grow beyond t...
Hi, I'm having an issue with my deployer and search head cluster while upgrading enterprise security. In step 8 of the Splunk doc below, it states that ES will recognize it is being i...