A couple of questions about clustering

[responsys_cm]

We just purchased four new 16 core servers for a new Splunk cluster. Our old server is 8 core. Is it possible to use my old server as the cluster master?

I know the cluster master can't index external data, but can it act as a forwarder? There is a convoluted input on that machine that would be a pain to migrate. Can a cluster master act as a light forwarder?

Can you run the cluster master on the same box as the deployment server?

Thanks.

Craig

[Genti · Accepted solution]

Is it possible to use my old server as the cluster master?

Yes! As long as the old server does not continue to be used for indexing...

Can a cluster master act as a light forwarder?

I wouldnt do that, i would instead install a second instance of Splunk on the same box, (different ports for splunkd/splunkweb) then use Splunk LightweightForwarder (or better yet, just splunk universal forwarder. this will depend on if you need python or not.)

Can you run the cluster master on the same box as the deployment server?

Yes! There shouldn't be an issue with running DS and CM on the same Splunk instance.