Hey, would you be able to check on this for me too? I was stuck for about 3 weeks and when I get back the link has already expired. Would you be able to push out a new registration link for me? Thank you.  ... View more

Was it the password? ... View more

If you are indexer is running as user 'splunk' that user needs 'read/write' access to your SAN storage for hotwarm and cold buckets. If access cannot be provided to 'splunk' account, you can have a 'service/domain account' created and can be used to run your indexer [ and/or other instances of splunk servers running as 'splunk']. This way, you may be able to work with your policy. Splunk 'admin' account is a special account for administering splunk instances. ... View more

Back up configuration information All Splunk's configuration information is contained in configuration files. To back up the set of configuration files, make an archive or copy of $SPLUNK_HOME/etc/. This directory, along with its subdirectories, contains all the default and custom settings for your Splunk install, and all apps, including saved searches, user accounts, tags, custom source type names, and other configuration information. Copy this directory to a new Splunk instance to restore. You don't have to stop Splunk to do this. http://docs.splunk.com/Documentation/Splunk/7.1.0/Admin/Backupconfigurations please advice is there a way to configure HA in Search head itslef without clustering HA - high availability comes with Clustering OR load balancing. ... View more

I believe load balancers expect both sides to be available, but perhaps yours can be configured otherwise. I'm not familiar with Windows-based LBs. ... View more