I have a Splunk 9.0.4 estate on Windows 2019 withthe following: Search head 2 x indexers Cluster master/deployment server I'm trying to automate all deployments of apps to forwarders and all configur...
I am going to create a multiple site clusterwith Splunk 6.5 enterprise.
According to Splunk document of "Configure multisite indexerclusters withserver.conf". the "mode" under "[clustering]" s...
...icrosoft cloud services. The app is easy enough to configure and whatnot. But having issue with creating an index for the app and ingesting into splunk.
We have the master node/deployment server, 8 indexer...
...eployment server, 4 indexers which are clustered using a master server.
Now, I want to create a new index named test which needs to be replicated across theindexers.
I read Configurethe peer indexes i...
Hello, I have to update the $SPLUNK_HOME/etc/system/local/limits.conf of clustered indexer, with new parameters. I'll have to create an app on deployment server to deploy it to indexers via m...
...heer number of suggested configuration changes. We have three indexers in our cluster. I wanted to throw these configurations out there as fodder and see what youguys come back with. Thanks! I...
...roperly. However, I then configured my SPLUNK Heavy Forwarder via "Forwarding and Receiving" to send to my clustered indexers (I added indexer1:9997, indexer2:9997) and I am no longer getting the e...
We just migrated over to a multisite indexercluster and we're seeing "Search Factor" (SF) and "Replication Factor" (RF) are not met. Below is theserver.conf setting we have on the master n...
...orwarding-with-new-self-signed-certificates/td-p/57046 But it wasn't working when I config on my 2 indexers. I'm using Splunk 8.2.4 version and my configuration in file server.conf of indexer 01 same l...
Hello, I am trying to create a new clustered search head and was planning to create this using the docker images, I have set the management URL to our index manager node however I am receiving this e...