After updating our search heads and Indexers to Splunk Enterprise 6.2, theDeploymentMonitor app is reporting double the number of servers actually deployed in our environment. Duplicate entries a...
In theDeploymentMonitor App, on the main dashboard there is the Index Throughput graph - which runs the "DM indexthru today vs last week" saved search.
When you viewthe dashboard, there are n...
...erver to monitorthe logs in the Log server.
Questions:
1. Where should I enable HEC?
This will be my first time using an HEC and I'm not sure if I'll enable it to Log server or Deployment Server....
The searches (or macros) which last term is:
… | fieldformat "Last Connected"=strftime('Last Connected', "%D %H:%M:%S %p")
show the expected format in the table view. Although, I have a p...
...> All Forwarders view.
It appears that theDeploymentMonitor is not supported with 5.0.1 of Splunk.
Thoughts?
Also - How do I remove or uninstall this application if it is not going t...
Splunk App: DeploymentMonitor - There are some prebuilt dashboards - ie Indexer Warnings, Forwarder Warnings, SourceType Warnings.
These are very helpful and when you viewthese dashboards, the t...
What capabilities I need to give to particular user on Deployment Server in order to viewmonitoring console?
Right now I have given admin_all_objects capability.
But when I am checking h...
...laves of a license master, they were no longer able to viewtheir license usage in theDeploymentMonitor app.
In investigating, it seems that $SPLUNK_HOME/var/log/splunk/license_usage.log is no l...
...orwarder, but I get a message in splunkd.log that says
forwarding to indexer group default-autolb group blocked for <nnnnn> seconds.
From the point of view of thedeploymentmonitor r...