When splunk is running in a production server , what complication can happen ?

human96 — Fri, 04 Mar 2022 14:49:44 GMT

when splunk is running in a production server , what complication can happen ?

Re: splunk enterprise

venky1544 — Fri, 04 Mar 2022 11:23:54 GMT

Lols using karma points as bait

splunk standlone is all the components in one server ie SH, IDX and this is more relevant to test and development environmentstandalone concept or architecture is never suggested for production environment As standlone will not support the concepts of High availibiity and Disaster recovery which is an imp feature for a functionality of an application in a production environmentEnd of the day you always want you application to be Up and running 24 X 7 .there is always a chance if any component like software or hardware of the server fails then the whole splunk application might collapse and whatever use case you are trying to achieve using splunk like log monitoring or alerting or dashboard might fail not just for splunk but for the source application And in real world scenarios you don't want you application to have downtime so you prefer distributed architecture

Hope this helps

topic When splunk is running in a production server , what complication can happen ? in Splunk Enterprise

When splunk is running in a production server , what complication can happen ?

Re: splunk enterprise