All Apps and Add-ons

Are there issues with deploying the Splunk App for Unix and Linux (5.0.3) & Splunk App for Windows Infrastructure (1.1.3) with Splunk 6.3 Search Head Clustering?

lisaac
Path Finder

I have a distributed non-clustered Splunk Enterprise environment. I am planning to implement Search Head clustering and a multisite indexer cluster. I know that the current Nix and Windows Infra apps haven't been certified yet by Splunk in a SH cluster, and there could be limited support from Splunk in the event of an issue.

I am sure there are users that have deployed the Apps in a SH cluster. Are there any caveats that people have seen on the deployment of the current shipping applications in a Splunk 6.3 SH cluster?

0 Karma

dbizzle
Explorer

i've basically found that no splunk supported app works with shclustering no matter how much effort you put into it. don't waste your time.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...