Deployment Architecture

Adding 2 clusters masters and 1 individual indexer to 1 set SH cluster

Splunk_rocks
Path Finder

hello Splunkers,

We have some tricky situations and here is the info:

1 set of Index cluster 1 master A Site A
1 set of index cluster 1 master B Site B

Note — Both are not identical. We just build based on our requirement, but part of the index cluster with different masters.

1 set of stand alone Indexer

My question is I have one set of search head clusters for all these sites since I have 2 masters nodes. So I'm confused how i can add to search head cluster configuration. Any advice will be great help.

0 Karma

Splunk_rocks
Path Finder

i found a document in Splunk website ..

https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Configuremulti-clustersearch

[clustering]
mode = searchhead
master_uri = clustermaster:east, clustermaster:west

[clustermaster:east]
master_uri=https://SplunkMaster01.example.com:8089
pass4SymmKey=someSecret

[clustermaster:west]
master_uri=https://SplunkMaster02.example.com:8089
pass4SymmKey=anotherSecret

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...