https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103013#M3818 <P>Really this is about performance, so this depends highly on your indexing volume on that machine, number of hosts calling home to the DS and how often they call in, and how many concurrent searches happen on that machine. Compare all this with the hardware you have and see if it works for you.</P> <P>You can tune the DS by spreading out the calling home interval, as well, from the default 30 seconds to several minutes and it can drastically reduce your performance hit as a DS.</P> Thu, 25 Jul 2013 13:25:28 GMT jtrucks 2013-07-25T13:25:28Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103012#M3817 <P>Do any one know if there are any know issues for using same Splunk instance for deployment server and clustering master ? <BR /> If this is a bad approach why ? </P> Mon, 22 Jul 2013 16:39:26 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103012#M3817 ssankeneni 2013-07-22T16:39:26Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103013#M3818 <P>Really this is about performance, so this depends highly on your indexing volume on that machine, number of hosts calling home to the DS and how often they call in, and how many concurrent searches happen on that machine. Compare all this with the hardware you have and see if it works for you.</P> <P>You can tune the DS by spreading out the calling home interval, as well, from the default 30 seconds to several minutes and it can drastically reduce your performance hit as a DS.</P> Thu, 25 Jul 2013 13:25:28 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103013#M3818 jtrucks 2013-07-25T13:25:28Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103014#M3819 <P>Additionally, Splunk recommends not doing this for Clustering. Read these first: <BR /> <CODE><A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Systemrequirements#Deployment_server_and_clusters" target="test_blank">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Systemrequirements#Deployment_server_and_clusters</A></CODE><BR /> <CODE><A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Enablethemasternode" target="test_blank">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Enablethemasternode</A></CODE></P> Thu, 25 Jul 2013 13:29:50 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103014#M3819 alacercogitatus 2013-07-25T13:29:50Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103015#M3820 <P>I have a DS and a Cluster Master running on the same host (a VM). I created them as separate Splunk installs (/opt/splunk_clustermaster and /opt/splunk_deploymentserver). As long as they don't conflict for ports and aren't in contention for CPU/RAM, there is no reason not to co-locate them for small to medium sized deployments. </P> <P>When DS gets really busy, this may become a problem. Like jtrucks says, either back down the frequency of checkins for DS clients, or setup additional DS instances on other hosts.</P> Mon, 28 Sep 2020 14:25:57 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103015#M3820 davidpaper 2020-09-28T14:25:57Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103016#M3821 <P>Thanks for the response but Master does not index any data on that machine.</P> Thu, 25 Jul 2013 15:06:12 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103016#M3821 ssankeneni 2013-07-25T15:06:12Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103017#M3822 <P>Thanks for the response. Can you be more specific regarding the port conflicts ? Currently I tested it in my development environment with a single Splunk service acting both as a deployment server and master node with out any issues.</P> Thu, 25 Jul 2013 15:09:06 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103017#M3822 ssankeneni 2013-07-25T15:09:06Z https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103018#M3823 <P>The issues with port conflict only appears if you run the DS and CM as separate splunk processes. If you run them both in the same process, then there is no port conflicts.</P> Thu, 25 Jul 2013 17:56:17 GMT https://community.splunk.com/t5/Deployment-Architecture/Any-know-issues-with-deployment-server-and-master-on-same/m-p/103018#M3823 davidpaper 2013-07-25T17:56:17Z