All Apps and Add-ons

DB_Connect in a distributed server environment

kartiksplunk
New Member

I have successfully deployed the db_connect app in a single server instance of splunk.
My questions here are regarding the deployment of db_connect in a distributed server splunk environment.

The docs suggest this:
"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain. To install, use the deployer to distribute DB Connect to all of the search head cluster members. Be aware that you must use the cluster deployer, not Deployment Server, to distribute DB Connect to search head cluster members."

Now I have this environment:
One Deployer
Two heads
Head1
Head2
One Peer Master
Three peers
peer1
peer2
peer3

Which "deployer" is the documentation talking about, do I have it or not? Thanks in advance.

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It is referring to the cluster deployer, see Use the deployer to distribute apps and configuration updates in the Distributed Search manual.

0 Karma

kartiksplunk
New Member

Well the docs say that the db_connect should be installed on the splunk heads, and suggest using a deployment server to do so (I may have read it incorrectly), however, this page:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Updating/Aboutdeploymentserver
says:
"You cannot use the deployment server to update indexer cluster peer nodes or search head cluster members."

0 Karma

ChrisG
Splunk Employee
Splunk Employee

The topic you quoted in your original question contains the following:

Note: Splunk DB Connect is incompatible with Deployment Server. Do not attempt to distribute DB Connect using Deployment Server.

This note is immediately above the passage you quoted.

The topic in the Distributed Search manual that I referred to is also linked to from the topic you quoted (although I admit there are a lot of links in that topic).

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...