I already have a clustered enterprise environment and I want to create an additional SH cluster for a dedicated purpose, but using the same IDX cluster. Do I need an additional Deployer server for t...
We need a High Availability (HA) Splunk Environment. The ideal architecture would be Distributed Clustered Deployment + SHC - Single Site (C3 / C13), which includes a 2-node Indexer Cluster, 3-node S...
...o 7 physical indexers with 2 instances of Splunk running on each server. Specs for those Indexing servers are:
OS: Linux Red Hat
CPU: 16-core 3.2 GHz
RAM: 128GB
HDD: SAN attached, 3 mounts p...
Hi,
I have to manage multiple UF agent with a singledeploymentserver.
I have to set up different whitelist/blacklist for different server classes. For example, I have to collect events with d...
I was wondering if possible for a single splunk universal forwarder to be managed by two different deploymentservers? I imagine it may not be advisable, because of potential configuration c...
Good morning.
We are (finally) looking to upgrade and add a second indexer in the mix. Our current setup is the following:
Searchhead x 1
Indexer x 1
DeploymentServer x 1
We want to do single...
...irectory with Access.log.
Please note that app "digitalApplication" contains many other files from deploymentserver.
Now the question is, how to disable monitoring for Access.log in one single UF....
Hi,
I have requirement where i need to configure the UF to send the data to two different deploymentservers or in other terms to two different Splunk enterprise.
We are doing this because the a...
Is there a way to force a deployment client to check in with deploymentserver on demand?
During tests I normally alter the phoneHomeInterval of client from it's default of something c...