DNS roundrobin, for deployment servers, indexers, or search heads? Doesn't work quite right for Deployment Servers (yet) that we've tried, indexers should NOT be put into this configuration since it handles it using autolb. Search Pools are safe with search heads, but not independently since authentication becomes an issue. ... View more

Hmm. I'm seeing the same issue where only 27 out of 29 security groups are showing up. Restart didn't help, resetting up the ldap config didn't change anything. This is happening on both 4.2 and 4.3.1. ... View more

Make sure the Sideview Utils (SVU) app is visible from the perspective of the UI. If it's invisible, it makes it unavailable to SoS. Once it's made visible on the search head with SoS, then SoS started working again for us. When SVU has in $SPLUNK_HOME/etc/apps/sideview_utils/local/app.conf : [ui] is_visible = false ...the checks for SVU in SoS will fail and you will see complaints that Sideview is not installed. In contrast, when SVU's app.conf contains : [ui] is_visible = true ...then SoS can detect SVU and will work as expected. ... View more