Deployment Architecture

DB Connect in distributed environment

kunadkat
Explorer

We have 3 indexers and 2 search heads and a deployment server. What are the best practices for installing DB connect in this environment. I did not see anything about distributed environment in DB Connect installation guide.

I would like to install DB Connect and use access oracle database for indexing as well as look up.

Do I need to install DB connect on all the boxes or just search heads?

Thanks,

0 Karma

ziegfried
Influencer

There's some information in the docs: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Otherdeploymentconsiderations

For your specific environment, I'd recommend installing DB Connect on the search heads for Lookup, as well as a separate instance for indexing. The second one should preferably be a heavy forwarder (universal forwarder is not supported), but you can also install it on an indexer.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...