...now how I could accomplish this? Your help is much appreciated.
Note: our Splunk instance has a heavy forwarder (where the file is) that is set to send data to our 2 indexers up in the AWS cloud. T...
Hi all,
I got a running searchhead cluster on latest Splunk Version 6.4.1.
I now need to add an additional member to the Cluster, and processed as described here:
http://docs.splunk.com/D...
I've been attempting to set a url for our single instance of Splunk. Right now we've been accessing it at http://servername:8000, but what I'm looking for is something like http://company.splunk...
When using a stand alone searchhead, we made configuration changes in etc/system/local/ e.g. outputs.conf, limits.conf, etc
I've converted this standalone instance to a searchhead cluster, b...
Hi All,
Currently I have a single instance which acts as indexers as well as searchhead. But i am planning to include another instance and make it as indexers and use the existing machine as search...
I am migrating from a stand-alone Splunk instance to a Splunk cluster (w/ search-head-cluster + indexer-cluster) and I am hitting this problem.
On my searchheads, I have these settings
/opt/s...
...nstalled on both SH, it works locally on both, but my KV store instance seems locally even though I have set 'replicate = true' in my Collection stanza and 'replication_host = FQDN' in server.conf.
R...
Environment:
Windows Server 2012
Splunk Ent 6.3
3 SearchHeads (all brand new instances)
1 Instance which is both DMC and Deployer (documentation said this should be ok)
All on the s...
...Cluster(s)" column in the MC Setup never shows the label. As such, I get the warning that "This instance is a searchhead deployer without a searchhead cluster label. We recommend you edit this instance...
In my company we setup our Splunk to use a SearchHead Cluster and a Indexer Cluster but I want to make a separate Splunk instance (not in the sh-cluster) use the indexers. This is meant to be a "d...