Hello, i have a customer that wants to create a Search Head Cluster. He has deployed me 4 Search Heads and 2 Search Deployer. Customer idea is to have 2 Search Deployer, one acting as master and one acting as backup server that replaces master in case of its failure. It's possible? Thanks a lot ... View more

Hello, due to a Windows systems with wrong system/date (date was set in 2034) the _internal index in my Splunk environment has this situation There's a way to remove the future events from this index?   Thanks a lot   ... View more

Hello, in my deploy server, that act as a LM,  i cannot see Licese Usage Report for 30-day period. It always shows "No results found". For the "today" report i can see data. Looking at ../var/splunk folder i can see the license_usage.log file but there's no type=Rollover_Summary inside. There's only type=Usage. Could you help me check this issue? Thanks a log ... View more