-
The current deployment uses ansible to enable inputs in etc/system/local this is dangerous because when scaling or simply a race condition the indexer will not be aware of its indexes and data will be…
-
Splunk indexes events immediately on startup this is causing events that should be on the indexer to be found on the local buckets of the SH in the SHC and CM/LM outputs.conf must be generated before …
-
**Environment**:
- fresh install of centos8
- `Linux 4.18.0-147.5.1.el8_1.x86_64 x86_64`
```
NAME="CentOS Linux"
VERSION="8 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="8"
PLATFORM…
-
## Description
[CVE-2019-14864](https://nvd.nist.gov/vuln/detail/CVE-2019-14864) is a vulnerability in Ansible's `no_log` flag for the splunk and sumologic plugins (sensitive data is incorrectly lo…
-
When using default.yml to add configuration, empty keys aren't added to config files
This can be interesting for example for adding empty serverclasses.
Example:
```
splunk:
conf:
serverc…
-
Hi,
In a Kubernetes cluster running `containerd` or `CRI-O`, the containers won't start due to a dependency to docker daemon.
I've raised the issue where the problem lies, https://github.com/spl…
dadux updated
4 years ago
-
Struggling to get a search head cluster up on K8s. Didn't know you had the examples, so started one way and got close, but the peers seemed to failing on the last step of registration with the captai…
-
Ability to define custom configurations via the default.yml is one of my favourite features of the install script, however, its use for defining indexes.conf is limited somewhat due to the fact that s…
-
It's possible I'm misunderstanding the intention of the `set_as_hec_receiver.yml` task. But I think there should be a check to see if splunk.hec is set.
For instance in the splunk_indexer role thi…
-
Hi all,
I'd love to migrate our Splunk cluster to Kubernetes, and was playing with the splunk-operator.
When the container starts, it fails with the following error :
```ERROR! Specified hos…
dadux updated
4 years ago