Deployment Architecture

Distribute configuration files across nodes in indexer cluster

rajeev_ku
Path Finder

I Have a PoC environment consist - indexer cluster, SHC, deployment server, forwarder.

I have to deploy configuration files across indexer, any sort and simple way to configure.

Thanks
Rajeev

0 Karma
1 Solution

pradeepkumarg
Influencer

You can distribute apps/configuration files to your indexers using Cluster Master. Put the required apps under $SPLUNK_HOME/etc/master-apps on the cluster master and apply cluster bundle to push the apps to all the peers.

More information in below document

http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Manageappdeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Updatepeerconfigurations

View solution in original post

pradeepkumarg
Influencer

You can distribute apps/configuration files to your indexers using Cluster Master. Put the required apps under $SPLUNK_HOME/etc/master-apps on the cluster master and apply cluster bundle to push the apps to all the peers.

More information in below document

http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Manageappdeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Updatepeerconfigurations

rajeev_ku
Path Finder

Thanks a lot.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

If you have an indexer cluster, you also need to have a cluster master. Indexer peer nodes get their configuration from the cluster master. This documented here.

rajeev_ku
Path Finder

Yes, i have deployed master server as well.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...