All Apps and Add-ons

HUNK not installing any copies HDFS or Hadoop nodes.

abhijitmishra
Explorer

To elaborate my question,

  1. Does Hunk need to be installed on the HDFS or the Hadoop nodes, like the TaskTracker, Job Manager , Resource Manager, Name Node ?
  2. If yes, do we have to do so manually, or will only placing a .tgx on the searchhead suffice ?
  3. In my case, I placed it on the Hunk SearchHead,

Reference -

During the first virtual index search, Hunk copies this package to HDFS then extracts it into all TaskTracker nodes that participate in the search. The extracted package is used to process search results in Hadoop.

Tags (2)
1 Solution

elin
Splunk Employee
Splunk Employee

No, Hunk does not need to be installed on any of the Hadoop nodes. It only needs to be installed as a Hunk search head, as it sounds like you've done. Any copying of the splunkd executable or package will be done automatically by the Hunk search head as needed.

The reference you've copied refers to what happens internally when you run a virtual index search on Hunk search head.

View solution in original post

elin
Splunk Employee
Splunk Employee

No, Hunk does not need to be installed on any of the Hadoop nodes. It only needs to be installed as a Hunk search head, as it sounds like you've done. Any copying of the splunkd executable or package will be done automatically by the Hunk search head as needed.

The reference you've copied refers to what happens internally when you run a virtual index search on Hunk search head.

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...