topic Re: Search heads HA in Deployment Architecture

Search heads HA

rajkumarv — Tue, 11 Dec 2018 09:38:30 GMT

Hi,

As per our design, we are planing to deploy 3 indexers in cluster and 2 search heads in HA. Can any one provide the detaiiled procedure on how to setup search heads in High Availability. Also please suggest is there any script available for deploying search head HA.

Re: Search heads HA

richgalloway — Tue, 11 Dec 2018 12:26:15 GMT

The closest you'll get to HA search heads is a Search Head Cluster (SHC). SHCs require at least 3 SHs. Note, this is not true HA.

For more about SHCs, see http://docs.splunk.com/Documentation/Splunk/7.2.1/DistSearch/SHCdeploymentoverview.

Re: Search heads HA

rajkumarv — Thu, 13 Dec 2018 06:37:45 GMT

Thanks Richgalloway. As per the design we have only two search heads and want to be in active and passive. Can we use load balancer to meet the requirement of active and passive?. Also these Splunk instances will be deployed in Windows platform. So can I use Windows based load balancer?.

Re: Search heads HA

rajkumarv — Thu, 13 Dec 2018 09:42:24 GMT

Hi, Thanks. We have only two search heads and will be configured in active and standby using load balancer. Do we have any custom script available to take incremental backups of the configuration and KV store from the primary node and replicated to standby?. Please advice.

Re: Search heads HA

richgalloway — Thu, 13 Dec 2018 12:28:42 GMT

Any publicly-available scripts would not be custom. You'll probably have to create your own. The ConfigurationSync app (https://splunkbase.splunk.com/app/574/) is very outdated, but may give you some hints.

To back up the KV Store, try the Gemini KV Store Tools app at https://splunkbase.splunk.com/app/3536/.

Re: Search heads HA

richgalloway — Thu, 13 Dec 2018 13:42:34 GMT

I believe load balancers expect both sides to be available, but perhaps yours can be configured otherwise.

I'm not familiar with Windows-based LBs.