All Apps and Add-ons

Are there issues with deploying the Splunk App for Unix and Linux (5.0.3) & Splunk App for Windows Infrastructure (1.1.3) with Splunk 6.3 Search Head Clustering?

lisaac
Path Finder

I have a distributed non-clustered Splunk Enterprise environment. I am planning to implement Search Head clustering and a multisite indexer cluster. I know that the current Nix and Windows Infra apps haven't been certified yet by Splunk in a SH cluster, and there could be limited support from Splunk in the event of an issue.

I am sure there are users that have deployed the Apps in a SH cluster. Are there any caveats that people have seen on the deployment of the current shipping applications in a Splunk 6.3 SH cluster?

0 Karma

dbizzle
Explorer

i've basically found that no splunk supported app works with shclustering no matter how much effort you put into it. don't waste your time.

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...