...his essentially allows anyone to set up a new SearchHead from another server, their desktop, etc, and just by knowing the URL of theCluster Master, bypass any and all account and index securityset...
Even when running the default License Usage Report (LURV) on my indexer cluster, the numbers are reporting almost twice what I'm actually using.
Default Search
index=_internal [`set...
Hi,
I'm testing out Splunk 6 and working on scripting thesetup of acluster. However, when I try to do a splunk edit cluster-config I'm unable to settheSecurityKey through the command line....
...nstances. All of these components are using ver 6.2.2. From theAWS side all of these instances are in the same VPC and subnet. All of the instances also use the same EC2 Security group with the following r...
It's almost time for Splunk’s user conference .conf23! This event is being held at the Venetian Hotel in Las Vegas and the Customer Success team couldn’t be more excited to have the chance to c...
Customer Success Know Before You Go Guide to .conf23.pdf (1,998 KB)
New to Splunk, can anyone help me build a SH Cluster? Any videos would be great, I tried reading the tutorials on Splunk but i'm still confused. I already have a practice environment setup.
h...
I have a script that generates both assets and identities .csv files for use by the Enterprise SecurityApp. I'd like to update those files regularly and not by hand. I can't sftp the files to the...
I have a 7 Node SearchHeadCluster pool that was set up using a secret key. Unfortunately we lost secret and now we have a need to add another Member. What are my options?
Keep getting this error after moving to SH cluster,
Please make sure that the pass4SymmKey setting in server.conf, under [general], is the same forthe License Master and all its slaves from ip='1...
I am experiencing periodic duplicate notable events in my searchheadcluster. I have a feeling this has something to do with how a SHC handles notable event syncing between searchheads. Has a...