Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
433 results
Sorted by:
12-07-2021
06:17 PM
Hi, What are the 4 important attributes to be considered under distsearch.conf
- Tags:
- distsearch.conf
Labels
- Labels:
-
search job inspector
-
subsearch
12-22-2010
03:25 PM
2 Karma
What factors should be taken into consideration in deciding the appropriate number of replicationThreads? Are there any performance considerations for increasing this value?
02-17-2022
09:47 AM
...nowledge bundle. Please remove/disable files from knowledge bundle or increase maxBundleSize in distsearch.conf.
Why is the SH behaving like this when the others have the same c...
Labels
- Labels:
-
search head
Show results in replies (5)
-
Hi @tokio13, what's the problem: you cannot access distsearch.conf or what else? Could you s...
-
Hi @tokio13 , if you can access the distsearch.conf, why cannot you use my solution? I...
-
I have access to distsearch.conf on all of my search heads (3) . In this environment Cluster M...
-
...dmin/Distsearchconf , you have to blacklist some (or all) of them in distsearch.conf [r...
-
I was able to solve the problem by going to the /opt/splunk/etc/apps/search/lookups/ and removing ...
04-24-2023
01:00 PM
Hello.
I can't change the file, or I might be doing something wrong.
Tell
I am editing distsearch.conf file I delete the contents of servers 1.1.1.3, 1.1.1.4
[distributedSearch] d...
Labels
Show results in replies (5)
-
It sounds like you're editing the file directly on an SHC node. That's the wrong way to manag...
-
...as. my /opt/splunk/etc/system/local/distsearch.conf file is overwritten back
-
...rchitecture/distsearch-conf-is-overridden-after-updating-through-GUI-upon/m-p/415626
-
...pp will contain a distsearch.conf file. Push the app to the cluster using the apply shcluster-b...
-
@richgalloway deleted the file along the path /opt/splunk/etc/system/local/distsearch.conf&n...
01-08-2019
10:58 PM
...he ‘distsearch.conf’ on SH (SPLUNK_HOME/etc/system/local/distsearch.conf)
I wonder why the peers where not in the file already, as the others were in it, and I never had to change it before.
I...
07-07-2010
02:33 PM
when configuring a distributed search ... why when i create a new server on the web interface it asks for a username:password though in distsearch.conf there isn't a place for it?
Is there s...
03-24-2015
09:51 AM
2 Karma
...earch heads, and restarted. In the app is a distsearch.conf file containing the following:
[replicationBlacklist]
winLookup = *windows_perfmon_details.csv
When I check with btool, I can see t...
02-16-2021
03:17 PM
....conf stanza, and not sure which one is the right one. Splunk/8.1.2/DistSearch/Configuredistributedsearch - here states: "Add the search peers To connect the search peers: 1. On the s...
Labels
- Labels:
-
distributed search
-
search head
-
search peer
02-25-2019
10:55 AM
2 Karma
We noticed that the 6.3.1 version of the Anomali Threatstream App for Splunk ships with a distsearch.conf file. That conf includes a replication whitelist for all json files (see below). Assuming t...
04-26-2023
07:45 AM
...oesn’t work, restarting the distsearch.conf file returns where this server is. How to remove this server, I've been trying to find a solution for a month now I am editing distsearch.conf file I delete t...
