Deployment Architecture

Adding 2 clusters masters and 1 individual indexer to 1 set SH cluster

Splunk_rocks
Path Finder

hello Splunkers,

We have some tricky situations and here is the info:

1 set of Index cluster 1 master A Site A
1 set of index cluster 1 master B Site B

Note — Both are not identical. We just build based on our requirement, but part of the index cluster with different masters.

1 set of stand alone Indexer

My question is I have one set of search head clusters for all these sites since I have 2 masters nodes. So I'm confused how i can add to search head cluster configuration. Any advice will be great help.

0 Karma

Splunk_rocks
Path Finder

i found a document in Splunk website ..

https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Configuremulti-clustersearch

[clustering]
mode = searchhead
master_uri = clustermaster:east, clustermaster:west

[clustermaster:east]
master_uri=https://SplunkMaster01.example.com:8089
pass4SymmKey=someSecret

[clustermaster:west]
master_uri=https://SplunkMaster02.example.com:8089
pass4SymmKey=anotherSecret

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...