Deployment Architecture

Adding 2 clusters masters and 1 individual indexer to 1 set SH cluster

Splunk_rocks
Path Finder

hello Splunkers,

We have some tricky situations and here is the info:

1 set of Index cluster 1 master A Site A
1 set of index cluster 1 master B Site B

Note — Both are not identical. We just build based on our requirement, but part of the index cluster with different masters.

1 set of stand alone Indexer

My question is I have one set of search head clusters for all these sites since I have 2 masters nodes. So I'm confused how i can add to search head cluster configuration. Any advice will be great help.

0 Karma

Splunk_rocks
Path Finder

i found a document in Splunk website ..

https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Configuremulti-clustersearch

[clustering]
mode = searchhead
master_uri = clustermaster:east, clustermaster:west

[clustermaster:east]
master_uri=https://SplunkMaster01.example.com:8089
pass4SymmKey=someSecret

[clustermaster:west]
master_uri=https://SplunkMaster02.example.com:8089
pass4SymmKey=anotherSecret

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...