Recently I had to rebuild our Splunk server. Luckily we had the config files so was able to get everything back up and running quickly. However, now all my servers have begun forwarding the logs in as expected, but I am missing everything prior to the system going down. Is there a simple way to centrally tell all my forwarders to resend all the logs? ... View more

Right now I have Splunk set up on a single Windows server, but have found some apps that require a Linux server to run the apps. I would like to add a Linux front end server to use the Linux apps and keep the Windows server for the apps that require a Windows sever to run from, and keep the indexer there as well for now. I am having trouble finding in the documentation how to set up this configuration. I would assume this would be possible and still have only one site and single pane of glass for my users as well? ... View more