Hello community! I am looking at various configurations options for AWS BYOL running ES. We'll be leveraging SmartStore and just had a couple of questions on the architecture:
Are we b...
How to change the architecture from a single indexer to an indexer cluster with indexer management? I need an overview of what configuration files need to be changed to change the architecture from s...
When one configures the indexer cluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
Hi, I'm new to Splunk, trying to understand for Splunk we have 1 installation we need to customize it to work as Forwarder or Indexer or Search Head, So want to know which all files need to modify t...
...ow i can deploy smartstore in the two regions, which basically will have ind in region A connect to smartstore and ind in region B conn to smartstore in region B. Can you provide an example of this t...
Hi,
We have Splunk v. 6.3.3 multi site indexer cluster (8 indexers), 4 search heads, deployment server.
What's the best approach to backup policy?
1. Should we backup $SPLUNK_HOME/etc director...
...bsp; Physical CPUs and vCPUs aren't equivalent so the hardware for a 1:1 match is more expensive. When I look at Splunk's proposed Azure architecture they use much smaller VMs for i...
...ooking the proper way to reconnect to the existing smartstore (s3 bucket path) and reset the cache manager to re-register all the contents again. Unfortunately I am not finding the documentation, w...
Hello,
I am looking for cold storage options for Splunk of longer term data rentention.
Can we use object storage for it ?
Has anyone tried testing this earlier?
Splunk version is 7.1.0 w...