https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Splunk-for-Active-Directory/m-p/99730#M3681 <P>I'm working on setting up multiple splunk indexers across a few geographical sites. Each site contains its own domain controller. Ideally, I'd like to have each indexer receive the data relevant for its site, and setup distributed search from our search head (easy enough).</P> <P>What I'm curious about is how this plays with the Splunk App for Active Directory, and further down the line, Splunk App for VMware. Do I need to have each site independently configured with the apps/TAs/appropriate indexes as fully functional (stand alone) before the distributed search will function properly on our search head? Or can I just create relevant indexes on each indexer, but leave the TA apps + Splunk for AD app unconfigured?</P> <P>Thanks in advance!</P> Fri, 25 Jan 2013 11:55:54 GMT j0sh3rs 2013-01-25T11:55:54Z https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Splunk-for-Active-Directory/m-p/99730#M3681 <P>I'm working on setting up multiple splunk indexers across a few geographical sites. Each site contains its own domain controller. Ideally, I'd like to have each indexer receive the data relevant for its site, and setup distributed search from our search head (easy enough).</P> <P>What I'm curious about is how this plays with the Splunk App for Active Directory, and further down the line, Splunk App for VMware. Do I need to have each site independently configured with the apps/TAs/appropriate indexes as fully functional (stand alone) before the distributed search will function properly on our search head? Or can I just create relevant indexes on each indexer, but leave the TA apps + Splunk for AD app unconfigured?</P> <P>Thanks in advance!</P> Fri, 25 Jan 2013 11:55:54 GMT https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Splunk-for-Active-Directory/m-p/99730#M3681 j0sh3rs 2013-01-25T11:55:54Z https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Splunk-for-Active-Directory/m-p/99731#M3682 <P>Does the <A href="http://docs.splunk.com/Documentation/ActiveDirectory/latest/DeployAD/WhataSplunkAppforActiveDirectorydeploymentlookslike">diagram in the documentation of a distributed deployment</A> give you the detail you need?</P> Mon, 28 Jan 2013 12:14:15 GMT https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Splunk-for-Active-Directory/m-p/99731#M3682 dart 2013-01-28T12:14:15Z