All Apps and Add-ons

DB_Connect in a distributed server environment

kartiksplunk
New Member

I have successfully deployed the db_connect app in a single server instance of splunk.
My questions here are regarding the deployment of db_connect in a distributed server splunk environment.

The docs suggest this:
"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain. To install, use the deployer to distribute DB Connect to all of the search head cluster members. Be aware that you must use the cluster deployer, not Deployment Server, to distribute DB Connect to search head cluster members."

Now I have this environment:
One Deployer
Two heads
Head1
Head2
One Peer Master
Three peers
peer1
peer2
peer3

Which "deployer" is the documentation talking about, do I have it or not? Thanks in advance.

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It is referring to the cluster deployer, see Use the deployer to distribute apps and configuration updates in the Distributed Search manual.

0 Karma

kartiksplunk
New Member

Well the docs say that the db_connect should be installed on the splunk heads, and suggest using a deployment server to do so (I may have read it incorrectly), however, this page:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Updating/Aboutdeploymentserver
says:
"You cannot use the deployment server to update indexer cluster peer nodes or search head cluster members."

0 Karma

ChrisG
Splunk Employee
Splunk Employee

The topic you quoted in your original question contains the following:

Note: Splunk DB Connect is incompatible with Deployment Server. Do not attempt to distribute DB Connect using Deployment Server.

This note is immediately above the passage you quoted.

The topic in the Distributed Search manual that I referred to is also linked to from the topic you quoted (although I admit there are a lot of links in that topic).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...