Deployment Architecture

Distribute configuration files across nodes in indexer cluster

rajeev_ku
Path Finder

I Have a PoC environment consist - indexer cluster, SHC, deployment server, forwarder.

I have to deploy configuration files across indexer, any sort and simple way to configure.

Thanks
Rajeev

0 Karma
1 Solution

pradeepkumarg
Influencer

You can distribute apps/configuration files to your indexers using Cluster Master. Put the required apps under $SPLUNK_HOME/etc/master-apps on the cluster master and apply cluster bundle to push the apps to all the peers.

More information in below document

http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Manageappdeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Updatepeerconfigurations

View solution in original post

pradeepkumarg
Influencer

You can distribute apps/configuration files to your indexers using Cluster Master. Put the required apps under $SPLUNK_HOME/etc/master-apps on the cluster master and apply cluster bundle to push the apps to all the peers.

More information in below document

http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Manageappdeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Indexer/Updatepeerconfigurations

rajeev_ku
Path Finder

Thanks a lot.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

If you have an indexer cluster, you also need to have a cluster master. Indexer peer nodes get their configuration from the cluster master. This documented here.

rajeev_ku
Path Finder

Yes, i have deployed master server as well.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...