Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Jrubalcaba
Jrubalcaba
Explorer
Member since:
09-12-2016
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 09-12-2016 |
Activity Feed
- Got Karma for Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers?. 06-05-2020 12:48 AM
- Posted Re: Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-19-2016 05:09 AM
- Posted Re: For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-05-2016 06:19 AM
- Posted For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Tagged For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Tagged For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Tagged For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Tagged For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Tagged For non-clustered search heads in a distributed environment, do I need to apply the same hot/cold bucket capacity planning as my indexers? on Deployment Architecture. 10-04-2016 08:15 AM
- Posted Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Tagged Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Tagged Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Tagged Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Tagged Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Tagged Should I disable THP on Linux RHEL 7.2 prior installing Splunk 6.5.0? on Deployment Architecture. 10-03-2016 06:45 AM
- Posted Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers? on Deployment Architecture. 09-14-2016 07:30 AM
- Tagged Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers? on Deployment Architecture. 09-14-2016 07:30 AM
- Tagged Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers? on Deployment Architecture. 09-14-2016 07:30 AM
- Tagged Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers? on Deployment Architecture. 09-14-2016 07:30 AM
- Tagged Before planning to deploy a Distributed Search environment, is there a partition model recommendation before installing Splunk 6.4 on my Linux servers? on Deployment Architecture. 09-14-2016 07:30 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 |
10-19-2016
05:09 AM
Good point, have you monitor further since turned off THP? RHEL 7.3 will be released in the next couple of months. I don't want to turn it back on.
... View more
10-05-2016
06:19 AM
Thank you jtacy, I will forward it to the indexers, since it has several advantages. Therefore I can simply create a regular local disk for the Linux OS. Is there a minimum HDD size for search heads recommended by Splunk?
... View more
10-04-2016
08:15 AM
For a 100% Virtual Environment:
I am planning to deploy Splunk 6.5 under Linux RHEL 7.2 in a Distributed Search Architecture. My indexers are going to be clustered with the Splunk application. I am performing capacity planning for HOT/COLD buckets at each indexer. I will have two NON-Clustered Search Heads .
For both Search Heads, do I need to apply the same HOT/COLD bucket principle or can I just assign a local disk as part of the VMDK for storage?
I will appreciate any feedback,
Thanks,
Jordi
... View more
10-03-2016
06:45 AM
Does anyone know if this holds valid in RHEL 7.2:
Recently I saw an article regarding Splunk performance and Transparent Huge Pages (THP) in Kernel 2.6
http://docs.splunk.com/Documentation/Splunk/6.5.0/ReleaseNotes/SplunkandTHP
If I am planning to install Splunk 6.5.0 in (distributed search architecture) with two search heads and 3 clustered indexers... Should I disable THP on every Linux RHEL 7.2 Kernel 3.10 instance prior installing Splunk 6.5.0?
... View more
09-14-2016
07:30 AM
1 Karma
I am planning to deploy a Splunk Distributed Search Architecture in a mixed environment of 500 servers mostly Windows and some Red Hat Enterprise (RHEL) Linux 7. Splunk hosts will be RHEL 7.2 I will have two search heads: Enterprise & Security, a 3 node indexer clustered on the Splunk application level, and a separate Deployment Server.
I read that Splunk will create the necessary directories during installation. Is there partition model recommendation or LVM I should have ready before installing Splunk 6.4 in my Linux servers? Or should I just let Splunk create directories automatically during install?
See my current Linux partitions below:
/root 50G
/home/ 200 G
/boot 500mb
/swap/ 8G
/tmp
/var
/var/tmp/
/var/log/
/var/log/audit/
... View more
09-12-2016
09:10 AM
Are these ports inbound or outbound?
... View more
