×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
kimch330
Engager
Member since: ‎03-24-2020
‎02-24-2025
Community Statistics
Posts 5
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎03-24-2020
Activity Feed
View All

Re: How does search head clustering refer to pytho...

by SplunkTrust in Splunk Dev
‎04-14-2020 05:10 AM
‎04-14-2020 05:10 AM
@kimch330 I don't think any python file which is modified through backend will replicate. In such changes, you should go with the deployer. Deployer will take care of that. The changes that the cluster replicates These are the main types of configuration changes that the cluster replicates: Runtime changes or additions to knowledge objects, such as saved searches, lookup tables, and dashboards. For example, when a user in Splunk Web defines a field extraction, the cluster replicates that field extraction to all search heads in the cluster. Runtime changes to users and roles. See Add users to the search head cluster. Please check the below document for more information about replication. https://docs.splunk.com/Documentation/Splunk/8.0.3/DistSearch/HowconfrepoworksinSHC Thanks ... View more

how can i know the metrics logs capture from pipel...

by in Deployment Architecture
‎03-30-2020 12:07 AM
‎03-30-2020 12:07 AM
Hi splunkers! how can i know(/find) the metric logs capture from pipeline? I want to find the heavy forwarder resource load.. i mean if index=_internal source=metrics.log group=*thruput* that is indexing pipeline capture. reference : https://docs.splunk.com/Documentation/Splunk/8.0.2/Troubleshooting/Aboutmetricslog but, index=_internal source=metrics.log group="tcpin_connections" i don't know that. can i know the parsing pipeline capture metric log groups? please help me. ps. I have referenced the site below. https://www.splunk.com/en_us/blog/tips-and-tricks/some-details-on-metrics-log-data-format-utility.html https://www.splunk.com/en_us/blog/tips-and-tricks/forwarder-and-indexer-metrics.html https://wiki.splunk.com/Deploy:Splunk_Metric_Reports https://www.splunk.com/en_us/blog/conf-splunklive/tracking-indexing-status-in-splunkd-log-and-metrics-log.html ... View more

Re: Is this Splunk Version Upgrade plan right?

by SplunkTrust in Installation
‎03-25-2020 02:48 AM
‎03-25-2020 02:48 AM
Hi @kimch330, I was speaking about waiting for byckets fully validation. It isn't mandatory but I prefer to perform updates in this way, to be more sure that the data are ok before the stop fro upgrade and there is only one node offline and the Splunk HA features give me tranquillity. Ciao. Giuseppe ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-24-2025 06:46 AM
Karma given to
View All