About saurabh_ha

saurabh_ha · ‎01-27-2023

Hello, I faced the same issue, following are the troubleshooting steps has been followed. As ERROR=401 that unauthrized request is made from deployer to splunk SHC Go to the /splunk-home/etc/system/local/server.conf of all SH cluster member and deployer and change the following, keep the value the same. [shclustering] pass4SymmKey=<clear_text_string> Restart splunkd. /opt/splunk/bin/splunk apply shcluster-bundle --answer-yes -target https://xx.xx.xxx.xx:8089 -auth admin:xxxmxmxm hope @erw550 this will help to you.

saurabh_ha · ‎01-11-2023

Hello Everyone, We have query regarding the cold storage and archive is it possible to archive the splunk logs in single site in distributed multisite environment, If yes can you share the any documents to configure the same. At one of customer, do not want the cold storage is It possible to configure the cold storage only at DC and at DR we can skip and we just need configure in hot storage path in indexes.conf. Let us know if it’s possible to configure above mentioned scenario

saurabh_ha · ‎10-04-2022

Thanks for the response. It is working as expected in our UAT as you mentioned

saurabh_ha · ‎10-03-2022

I want to create the new_field when other values of field_1 is less than of first value. Here in below example as 23 greater than other values then do sum of all which is 44. for 10 is the smallest then its result is 10 for 11 there is one more value is less which is 10 then do sum with 10 then result is 21

Posts	4
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎12-02-2021

Online Status	Offline
Date Last Visited	‎01-27-2023 10:39 AM

Is it possible to archive the Splunk logs in singl...

How to compare the values from same fields?

Re: Why can I not push config from deployer to sea...

Is it possible to archive the Splunk logs in singl...

Re: How to compare the values from same fields?

How to compare the values from same fields?