Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
330 results
Sorted by:
12-22-2010
03:25 PM
2 Karma
What factors should be taken into consideration in deciding the appropriate number of replicationThreads? Are there any performance considerations for increasing this value?
01-08-2019
10:58 PM
...he ‘distsearch.conf’ on SH (SPLUNK_HOME/etc/system/local/distsearch.conf)
I wonder why the peers where not in the file already, as the others were in it, and I never had to change it before.
I...
02-16-2021
03:17 PM
....conf stanza, and not sure which one is the right one. Splunk/8.1.2/DistSearch/Configuredistributedsearch - here states: "Add the search peers To connect the search peers: 1. On t...
Labels
- Labels:
-
distributed search
-
search head
-
search peer
07-07-2010
02:33 PM
when configuring a distributed search ... why when i create a new server on the web interface it asks for a username:password though in distsearch.conf there isn't a place for it?
Is there s...
03-24-2015
09:51 AM
2 Karma
...earch heads, and restarted. In the app is a distsearch.conf file containing the following:
[replicationBlacklist]
winLookup = *windows_perfmon_details.csv
When I check with btool, I can see t...
02-26-2021
02:54 AM
Hi, We have 3 search head in a cluster and 3 indexers in non clustered environment. Whenever we do a rolling restart of the SH, the distsearch.conf in etc/system/local and some lookup csv in s...
Labels
- Labels:
-
other
03-05-2021
03:48 AM
in the distsearch.conf on our search head we can blacklist applications [replicationBlacklist] splunk_app1_blacklist = apps/splunk_app1/... splunk_app2_blacklist = apps/splunk_app2/... W...
Labels
- Labels:
-
distributed search
02-25-2019
10:55 AM
2 Karma
We noticed that the 6.3.1 version of the Anomali Threatstream App for Splunk ships with a distsearch.conf file. That conf includes a replication whitelist for all json files (see below). Assuming t...
04-19-2012
12:58 PM
1 Karma
Does anyone have any examples of regex used in the Blacklist patterns for distsearch.conf? We are trying to limit what gets replicated in distributed searches and I thought this would be a good s...
07-26-2019
05:25 PM
...eers instead"
After some re-search and looking through answers site, this could be due to inconsistent distsearch.conf on some of the search heads in the cluster ; so I updated and removed all t...
