All Apps and Add-ons

App and Add-on on separate machines

sergiyyarinovsk
Explorer

Hi there.

I have an add-on which collects data. This add-on also has simple panel views. And I have separate app with dashboard. App's dashboard contains views from add-on. Everything works fine on same computer. Is it possible to move app and add-on on separate computers with access to the internet and make them work together somehow? 🙂
Splunk Enterprise latest version.

Thanks

Tags (1)
0 Karma
1 Solution

sergiyyarinovsk
Explorer

Thanks for the quick response. Ok, I can move views to the app. But then:
1. How will application know where add-on index is?
2. Does it work with both cases: app and add-on on the same machine and separate?

View solution in original post

0 Karma

sergiyyarinovsk
Explorer

Thanks for the quick response. Ok, I can move views to the app. But then:
1. How will application know where add-on index is?
2. Does it work with both cases: app and add-on on the same machine and separate?

0 Karma

hardikJsheth
Motivator

1) Two different ways.
--> If you have indexer and search head on same node, just configure it to receive data.
--- >If you have three tier architecture, then configure it through indexer clustering.

2)Yes it works in both cases.

hardikJsheth
Motivator

I aggree with answer from richgalloway. In Splunk, you can have a distributed architecture, where one node is data collection node known as forwarder. Forwarder sends data to Indexer node. Third one is a Search head node. All these are Splunk Enterprise Application working differently except Forwarder. Forwarder can be either full Splunk enterprise version or Splunk Universal Forwarder.

According to your requirement, you can keep one node as Forwarder (either heavy or universal forwarder) and second node which can work as Indexer as well as Search head node Install Add on the Forwarder and visualization app on Search head node.

richgalloway
SplunkTrust
SplunkTrust

Add-ons should not have views. They should collect data for indexing. All views should be in the separate app which gets its data from the index(es). Following this model allows for the app and add-on to be on separate servers and still function normally.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...