Deployment Architecture

DB Connect in distributed environment

kunadkat
Explorer

We have 3 indexers and 2 search heads and a deployment server. What are the best practices for installing DB connect in this environment. I did not see anything about distributed environment in DB Connect installation guide.

I would like to install DB Connect and use access oracle database for indexing as well as look up.

Do I need to install DB connect on all the boxes or just search heads?

Thanks,

0 Karma

ziegfried
Influencer

There's some information in the docs: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Otherdeploymentconsiderations

For your specific environment, I'd recommend installing DB Connect on the search heads for Lookup, as well as a separate instance for indexing. The second one should preferably be a heavy forwarder (universal forwarder is not supported), but you can also install it on an indexer.

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...