Deployment Architecture

Adding 2 clusters masters and 1 individual indexer to 1 set SH cluster

Splunk_rocks
Path Finder

hello Splunkers,

We have some tricky situations and here is the info:

1 set of Index cluster 1 master A Site A
1 set of index cluster 1 master B Site B

Note — Both are not identical. We just build based on our requirement, but part of the index cluster with different masters.

1 set of stand alone Indexer

My question is I have one set of search head clusters for all these sites since I have 2 masters nodes. So I'm confused how i can add to search head cluster configuration. Any advice will be great help.

0 Karma

Splunk_rocks
Path Finder

i found a document in Splunk website ..

https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Configuremulti-clustersearch

[clustering]
mode = searchhead
master_uri = clustermaster:east, clustermaster:west

[clustermaster:east]
master_uri=https://SplunkMaster01.example.com:8089
pass4SymmKey=someSecret

[clustermaster:west]
master_uri=https://SplunkMaster02.example.com:8089
pass4SymmKey=anotherSecret

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...