cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
chirag3pillar
Explorer
Member since: ‎12-19-2013
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎12-19-2013
Activity Feed
View All

Re: splunk hosting on a internal site

by in Getting Data In
‎02-02-2014 09:46 PM
‎02-02-2014 09:46 PM
Thanks for the input & feedback for the guidance to the documentation 2 more -For Forwarders, i can do it through the internal IP's and don't need it through the DNS - so we are fine on that front -Yes, second one is primarily not giving the users like 10.15.0.2:8000 to hit for queries but something like splunk.companyname.com which is set up on the LB and resolving DNS to 10.15.0.2:8000 or 10.15.0.3:8000. You say, that is possible.. right? Also you meant that in case i want to set up the above, it would require search head pooling and then LB comes in. Is this understanding correct? lmk thks ... View more

splunk hosting on a internal site

by in Getting Data In
‎02-02-2014 07:30 PM
1 Karma
‎02-02-2014 07:30 PM
1 Karma
Hi Support, I am a production licensed user of Splunk. Though, we have done all our dashboard and report POC's in the staging environment, now the time has arrived to deploy in production. For the same, we have two new high end servers being setup which will hold our indexers and search-heads. So, for example, we have 12 forwarders sending log data, it shall be received by the indexers for indexing and search head shall be searching. The IP's of the new servers can be accessed with like 10.15.0.2:8000 and 10.15.0.3:8000. Now comes my question - 1. Is it possible to host these sites by a single DNS and access through LB? 2. Can I access the sites not by typing the IPs:8000 but use DNS name resolution? In staging, we were only testing stuff, that's why these questions have come in now Please let me know or guide me to some documented feedback Thanks Regards, Chirag ... View more

Re: forwarder data transfer not working

by in Deployment Architecture
‎12-20-2013 05:49 AM
‎12-20-2013 05:49 AM
solved it, thanks - index = main solved it ... View more

forwarder data transfer not working

by in Deployment Architecture
‎12-20-2013 05:04 AM
‎12-20-2013 05:04 AM
I have set up an indexer and a forwwarder On forwarder, the logs are - 12-20-2013 09:36:24.224 +0530 WARN TcpOutputFd - Connect to 192.168.1.40:9997 failed. No connection could be made because the target machine actively refused it. 12-20-2013 09:36:24.224 +0530 ERROR TcpOutputFd - Connection to host=192.168.1.40:9997 failed 12-20-2013 09:36:24.224 +0530 INFO TcpOutputProc - Detected connection to 192.168.1.40:9997 closed 12-20-2013 09:36:24.224 +0530 INFO TcpOutputProc - Will close stream to current indexer 192.168.1.40:9997 12-20-2013 09:36:24.224 +0530 INFO TcpOutputProc - Closing stream for idx=192.168.1.40:9997 12-20-2013 09:36:25.684 +0530 WARN TcpOutputFd - Connect to 192.168.1.40:9997 failed. No connection could be made because the target machine actively refused it. 12-20-2013 09:36:25.684 +0530 ERROR TcpOutputFd - Connection to host=192.168.1.40:9997 failed 12-20-2013 09:36:31.366 +0530 INFO TcpOutputProc - Connection to 192.168.1.40:9997 closed. Connection closed by server. The indexer on the server is receiving data on 9997 (As the port is open) but there is no data transfer Please let me know what i am doing wrong. I am a production 20 GB limit licensed user for Splunk Thanks ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma from
View All