Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sushree1234
sushree1234
Explorer
Member since:
03-07-2022
09-06-2022
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 03-07-2022 |
Activity Feed
- Posted Re: want to create a global field for an indexed data using automatic lookup on Knowledge Management. 09-06-2022 03:44 AM
- Karma Re: want to create a global field for an indexed data using automatic lookup for m_pham. 09-06-2022 03:43 AM
- Posted How to create a global field for an indexed data using automatic lookup? on Knowledge Management. 09-02-2022 09:35 AM
- Posted Re: How multisite SH clusters work on Deployment Architecture. 04-20-2022 08:19 AM
- Posted How multisite SH clusters work on Deployment Architecture. 04-20-2022 07:43 AM
- Tagged How multisite SH clusters work on Deployment Architecture. 04-20-2022 07:43 AM
- Karma Re: Impact of scaling up a multisite indexer cluster for gcusello. 04-20-2022 07:19 AM
- Posted What will be the Impact of scaling up a multisite indexer cluster? on Deployment Architecture. 04-19-2022 08:51 AM
- Posted Re: multisite clustering search & replication factor on Deployment Architecture. 03-09-2022 07:24 AM
- Posted Re: multisite clustering search & replication factor on Deployment Architecture. 03-09-2022 04:44 AM
- Posted Re: multisite clustering search & replication factor on Deployment Architecture. 03-07-2022 08:06 AM
- Posted What would be the best site search factor & site replication factor for a 3-sites multisite clustering? on Deployment Architecture. 03-07-2022 07:17 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-06-2022
03:44 AM
can i get a example for props.conf & transforms.conf for multiple host automatic lookup setup
... View more
09-02-2022
09:35 AM
Hi All ,
So i was trying to create an global field for a newly indexed data , so trying out with automatic lookup settings . Ex- in the indexed data - datacenter name is not mentioned , so wanted to populate it using automatic lookup . I am able to do that , but for only 1 sourcetype , i have 100+ sourcetypes , is there any way to define apply to - sourcetype/hosts to multiple one . Please let me know .
... View more
Labels
- Labels:
-
lookup
04-20-2022
08:19 AM
we are not going to use root user for any internal config changes , its just an example i copy pasted for reference . And my bad , i placed the number wrongly . Its 6 SHs in 1 cluster and 3 in another (those are reporting SHs) , not for normal users . Could you please explain the configuration . Because in splunk doc i can see the configuration for single SH . not for SH clusters with multisite indexer cluster .
... View more
04-20-2022
07:43 AM
I have a multisite cluster with 3 sites . Which is having 6 indexers as peer nodes clustered across the 3-sites (2 indexers each) managed by a manager node . Also we have 2 SHs clusters across the 3-sites . SHcluster1 - total 9 SHs (we kept 3 SHs in each site) SHcluster2- total 6 SHs (we kept 2 SHs in each site) so wanted to understand how the configuration is going to be in deployer, each SHs ,manager node as this will be a multisite cluster . As per my knowledge for multisite cluster - for single SHs config is Configure the search heads ----------------------------------- sudo ./splunk edit cluster-config -mode searchhead -site site1 -manager_uri <URI>:<mngmtPort> -secret <secretkey> so likewise what will be the configuration for SH clusters in multisite .
... View more
- Tags:
- multisite
Labels
- Labels:
-
search head
04-19-2022
08:51 AM
Hi , I have a multisite indexer cluster (3 sites , 2 indexers each, total 6 indexers) . we have kept - site_replication_factor = origin:2,total:5 site_search_factor = origin:2,total:4 we have this query , if we scale up the indexer cluster and add up more indexers and change the site_replication_factor & site_search_factor accordingly , then what will be the impact on the whole architecture . anything we need to take care of before scaling up the architecture . Let me know .
... View more
Labels
- Labels:
-
indexer clustering
03-09-2022
07:24 AM
As i have mentioned before , it is geographically distributed in 3 different location , So the main agenda for this multisite clustering is no data loss and high availability . And we have assigned enough space to each instance to keep the backup as well . So could you please give your suggestion in this .
... View more
03-09-2022
04:44 AM
As you have asked - Are the sites geographically dispersed? - yes geographically it is . All 3 sites are placed in different location . Do you have fast pipes (more than one) connecting the sites? -yes we have . Do you enough disk space to store multiple copies of your Splunk data?- yes we have kept enough space to keep multiple copies . I just want a standard count for the site replication factor and search factor for a multisite cluster - having 3 sites available .
... View more
03-07-2022
08:06 AM
we are making a multisite cluster for high availability . so for a 3 sites cluster what will be the best possible way of defining the site replication and site search factor .
... View more
03-07-2022
07:17 AM
Hi All, I am going to work on a multisite architecture (3-sites) where we are keeping 6 indexers in a cluster (2 in each sites) ,and 6 SHs in a cluster (2 in each sites) , 3 SHs in another cluster (1 in each site) for reporting . 1 Indexer cluster 2 SHs clusters
i wanted to understand what will be the best site search factor & site replication factor for a 3-sites multisite clustering . Any suggestion will be appreciated . Thanks , Sushree
... View more
Labels
- Labels:
-
search head clustering
