Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
2,000 results
Sorted by:
10-06-2020
05:29 AM
1 Karma
...outeandfilterdatad. Or by directly setting the _TCP_ROUTING with inputs.conf on the UF. In outputs.conf we configure the two different destinations as in the example below. We see that in all Splunkdoc e...
Labels
10-23-2017
03:29 PM
Hi,
Can someone share with me the recent inputs & outputs conf file for SSL encryption? I am having some trouble for securing the connection between forwarder and indexer.
08-27-2012
06:01 AM
...cpout:splunk]
server = indexer1:9997,indexer2:9997
I can see the client has successfully downloaded the outputs.conf file from the deployment server:
/opt/splunkforwarder/etc/apps/secure/outputs.conf...
02-10-2021
06:02 AM
I have inherited a SPlunk environment and one thing i've noticed is that one all of our heavy forwarders are using useACK. Is this best practice? we are seeing duplicate events due to this, and...
Labels
- Labels:
-
heavy forwarder
02-21-2020
03:23 PM
...s set up as a Deployment Server as well) to pull the app that contains the testing SSL configuration for outputs.conf, certain devices do not hash the sslPassword when the UF restarts, while others d...
- Tags:
- outputs.conf
08-28-2020
09:49 PM
...o ensure it had a custom outputs.conf if I am "sending" to the same system. Since it is acting as in indexer, wouldn't it immediately pull the data and then index it without needing a /local/outputs...
Labels
- Labels:
-
indexer
-
scripted input
05-05-2015
06:19 AM
Hi,
I have a new indexer that is ready to be used. My question is how do I get my hundreds of FWD's to pick it up? We have an app that controls the outputs.conf, but even if I update it, will t...
11-14-2012
08:58 AM
3 Karma
I was wondering if I can use our deployment server to change the outputs.conf on our windows universal forwarders so they point to another indexer if needed to.. is there any standard practice for d...
Show results in replies (7)
-
...tc/system/local/outputs.conf file. you can only change $splunk_home/etc/apps/$app_name$/local/outputs...
-
...pecifically, anything you configure in $SPLUNK_HOME/etc/system/local/outputs.conf can override an outputs...
-
the answer is misleading. you can change the $splunk_home/etc/system/local/outputs.conf file. y...
-
that's probably what I'm looking for.. but even If the /system/local/outputs.conf and /apps/U...
-
Because outputs.conf - like most any other Splunk config file - is merged together from all of t...
-
...efault/outputs.conf define a serverclass.conf on the deployment server (to match clients to a...
-
...pps/appname/default/outputs.conf Also, 2nd step can be done in splunk web interface, in Settings &g...
08-26-2010
03:22 PM
2 Karma
We were running some load over the weekend, and ran into an issue where one of our Forwarder nodes went unresponsive. We are now attributing it to a large mazQueueSize in outputs.conf, all Indexer n...
06-22-2018
08:31 AM
On the outputs.conf of the forwarder we use sslPassword , sslCertPath and sslRootCAPath while the inputs.conf refers to the same exact configurations via password , serverCert and r...
