- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can the deployer and search head cluster members run on the same load balancer? I have a load balancer and the pool members behind the lb are search head members, captain. Can I have the deployer on the same load balancer or should I run independently outside lb?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Bit tricky, but my answer is it depends on your environment and risk factors
- Deployer is mainly for Splunk administrators but SH members for end-users. So the main query to ask yourself is why you need a load-balancer for Deployer?
- If you have so many Deployers (eg to manage multiple SH clusters), then better to configure a LB just for deployers
- In some of our client environments, the administrator systems are in different security context and accessible only for administrators similar to Cluster Master and deployment-server, but SH members are exposed to more employees like Customer Support. So better to have segregation so no one meddles with your admin systems
Using all the above analogy , my suggestion is to have SH-members in LB and Deployer to run separately.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for all the inputs. I will have the deployer out of the LB as a stand alone Splunk server.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi dhawal_sanghvi,
why you need to put your Deployer on Load Balancer?
Deployer is a single server (so it doesn't need LB) dedicated to manage Search Head Cluster and usually isn't accessed by users, but only by administrators.
Bye.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Bit tricky, but my answer is it depends on your environment and risk factors
- Deployer is mainly for Splunk administrators but SH members for end-users. So the main query to ask yourself is why you need a load-balancer for Deployer?
- If you have so many Deployers (eg to manage multiple SH clusters), then better to configure a LB just for deployers
- In some of our client environments, the administrator systems are in different security context and accessible only for administrators similar to Cluster Master and deployment-server, but SH members are exposed to more employees like Customer Support. So better to have segregation so no one meddles with your admin systems
Using all the above analogy , my suggestion is to have SH-members in LB and Deployer to run separately.
