All Apps and Add-ons

DB_Connect in a distributed server environment

kartiksplunk
New Member

I have successfully deployed the db_connect app in a single server instance of splunk.
My questions here are regarding the deployment of db_connect in a distributed server splunk environment.

The docs suggest this:
"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain. To install, use the deployer to distribute DB Connect to all of the search head cluster members. Be aware that you must use the cluster deployer, not Deployment Server, to distribute DB Connect to search head cluster members."

Now I have this environment:
One Deployer
Two heads
Head1
Head2
One Peer Master
Three peers
peer1
peer2
peer3

Which "deployer" is the documentation talking about, do I have it or not? Thanks in advance.

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It is referring to the cluster deployer, see Use the deployer to distribute apps and configuration updates in the Distributed Search manual.

0 Karma

kartiksplunk
New Member

Well the docs say that the db_connect should be installed on the splunk heads, and suggest using a deployment server to do so (I may have read it incorrectly), however, this page:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Updating/Aboutdeploymentserver
says:
"You cannot use the deployment server to update indexer cluster peer nodes or search head cluster members."

0 Karma

ChrisG
Splunk Employee
Splunk Employee

The topic you quoted in your original question contains the following:

Note: Splunk DB Connect is incompatible with Deployment Server. Do not attempt to distribute DB Connect using Deployment Server.

This note is immediately above the passage you quoted.

The topic in the Distributed Search manual that I referred to is also linked to from the topic you quoted (although I admit there are a lot of links in that topic).

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...