Hi to everyone
I have a design, with four Splunk instances (two searchhead, and two indexers). I want an "indexer cluster" (for replication and fault tolerance), and a "searchheadcluster" (f...
...ndexer cluster, and a deployment server to deploy all the apps to the forwarders to. How many total Ubuntu Server VMs in Hyper-V should I spin up? I’m thinking 1 searchhead, at least 2 indexers (r...
Lately, I have been reading the Splunk Validated Architectures (SVAs) [found here] The document states in the Introduction that there is a tool called "Interactive Splunk Validated Architecture...
This exciting news.
I saw this published in Splunk's Blog:
Splunk Enterprise 6.2 adds a key capability with SearchHeadClustering.
http://blogs.splunk.com/2014/10/07/enterprise_hunk_62/
A...
...etting this error
"Error occurred attempting to remove 1.1.1.3:8089: Failed to proxy search-server command request to Captain. Reason : ERROR: There is no search peer with a URI of https://1.1.1.3:8089. E...
Hello,
Could you let us know if it’s possible to connect one cluster master to another cluster indexers using distributed search or clustering settings?
Example :
testenvmgt1 (m...
We created a KV Store in a searchhead in clustered architecture, by adding the files collections.conf and transformations.conf.
--But we can't access the kvstore using inputlookup command and g...
I inherited a splunk mesh of search-heads, deployment server, index cluster, etc. I am trying to figure out all this splunk stuff, but ran into an issue that I am not sure if it ignores best p...
...s and 3 Enterprise SearchHeads in a cluster. Each SH will run on instances with 16CPU and 64GB RAM. We are planning to colocate the Cluster Master and License Master (8 CPU, 64GB RAM), as well as D...