All Apps and Add-ons

Will Splunk DB Connect database inputs work in a Search Head Cluster?

a212830
Champion

Hi,

We are currently using DB Connect to index a couple of different datasets from Oracle. If I put it on a Search Head Cluster, will the database inputs work like other search jobs and be spread out across the cluster (and obviously not duplicate data)?

0 Karma

jmallorquin
Builder

Hi,

Only the captain will execute the db query.

http://docs.splunk.com/Documentation/DBX/2.1.3/DeployDBX/Distributeddeployment

"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain"

Hope i help you

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...