Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
10,000 results
Sorted by:
03-04-2021
07:16 AM
Hi All, We are migrating SHC members from old to new datacenter. There are total 3 members as a part of SHC. Please tell us which is the best approach to follow. 1. Add 1 new node to the SHC, have...
- Tags:
- migration
- upgradation
Labels
08-09-2021
12:38 AM
When I try to push to search head from deployer using command /opt/splunk/bin/splunk apply shcluster-bundle -target it gives the error "Error, Parameters must b...
Labels
- Labels:
-
other
02-28-2012
01:10 PM
2 Karma
...tem Type"
(where viewby is selected value from dropdown. Now the applicable values for viewby in the drop down are "type1", "type2", "type3". In the column header, I want to display "Type 1" f...
01-07-2022
02:34 AM
Generally indexer is used to store indexes but in the standalone architecture how data is stored ???
Labels
- Labels:
-
search head
02-18-2022
02:32 AM
Hello,
we have 3 SHC, could it be possible to add 1 SH dedicated to a special team and give admin rights only to this last one?
Thanks.
Labels
- Labels:
-
search head clustering
Show results in replies (7)
-
You should simply install a separate SH using the same indexer(s). Of course it would be managed c...
-
Hi @realsplunk, if you have a Search Head Cluster you have the same rights in all the c...
-
Yes this looks good solution, thanks.
-
Is it possible however this team adds then can_delete or delete_by_keyword capability and may be ab...
-
Hi @realsplunk, yes it's possibile but it isn't a good idea! Ciao. Giuseppe
-
so that's the risk 😉
-
That’s probably the biggest issue, as they had admin rights then they can do anything to all data w...
05-20-2020
09:35 PM
08-13-2021
04:30 AM
I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled. https://docs.splunk.com/Documentation/Splunk/8.2.1/Knowledge/Sharedatamodelsummaries The article states: "Y...
Labels
- Labels:
-
search head clustering
03-20-2019
02:02 PM
Hi,
I need step to step process of adding new search head into my splunk instances. My splunk setup as follows:
1. one search head
2. one deployment server
3. three search peers.
So i a...
- Tags:
- splunk-enterprise
Show results in replies (5)
-
You must have at least three search heads to create a search head cluster (SHC). You will also n...
-
@richgalloway Hi, I will have only two search head. Don't I need SHC?
-
Have you read the docs already? There is extensive information about search head clustering, s...
-
@ChrisG @richgalloway I am having trouble in finding the security key when adding the new search head...
-
Not with two search heads, no. Quoting from System requirements and other deployment c...
05-08-2019
01:07 PM
Hi
In my company we are have 8 Search heads.
we want to change it into search head cluster.
what all the configuration i need to change please help me with this.
- Tags:
- splunk-cloud
07-07-2021
08:57 AM
I have a Splunk Enterprise instance with a 1GB license set up to aggregate logs in a small Windows AD environment (Server 2016 DC, CentOS file server, and < 10 Win10 workstations). I currently hav...
Labels
- Labels:
-
administration
