https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199844#M7451 <P>Okay, thank you very much for your answers. <BR /> I was also wondering if it is mandatory to have a master node as the cluster isn't that big (only composed of two indexers).<BR /> Would it be possible to have an architecture composed of indexers' cluster without any master node ? </P> Wed, 13 Apr 2016 15:49:35 GMT ameslet 2016-04-13T15:49:35Z https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199841#M7448 <P>Hi Splunkers, </P> <P>I am new to Splunk and I have to install and configure Splunk on three virtual machines (1 Search Head and a cluster composed of 2 indexers). I went through the Splunk documentation and saw that a master Node is required to handle the behavior of the indexer cluster. <BR /> I would like to install both instances, the master node and the search head, on the same VM even if the documentation doesn't recommend it. How could I get it done? </P> <P>If this task is impossible, how could I configure an indexer without taking into account a master node as the IP address of the master node must be written in the configuration file of any indexer ? </P> <P>Thanks in advance. </P> <P>Alex</P> Wed, 13 Apr 2016 08:13:48 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199841#M7448 ameslet 2016-04-13T08:13:48Z https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199842#M7449 <P>Technically it can but it's not recommended, specially for Production. See these links</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.4.0/Indexer/Enablethemasternode">http://docs.splunk.com/Documentation/Splunk/6.4.0/Indexer/Enablethemasternode</A><BR /> <A href="https://answers.splunk.com/answers/71201/clustering-can-a-cluster-master-also-act-as-a-search-head.html">https://answers.splunk.com/answers/71201/clustering-can-a-cluster-master-also-act-as-a-search-head.html</A></P> Wed, 13 Apr 2016 14:57:44 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199842#M7449 somesoni2 2016-04-13T14:57:44Z https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199843#M7450 <P>I would also add -<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Aboutclusters">http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Aboutclusters</A></P> <P>Since the master node "just" manages the cluster, it's hard to believe that they would collide on resources, but you better monitor the server well.</P> Wed, 13 Apr 2016 15:03:24 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199843#M7450 ddrillic 2016-04-13T15:03:24Z https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199844#M7451 <P>Okay, thank you very much for your answers. <BR /> I was also wondering if it is mandatory to have a master node as the cluster isn't that big (only composed of two indexers).<BR /> Would it be possible to have an architecture composed of indexers' cluster without any master node ? </P> Wed, 13 Apr 2016 15:49:35 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-it-possible-to-install-a-master-node-and-a-search-head-on-the/m-p/199844#M7451 ameslet 2016-04-13T15:49:35Z