Deployment Architecture

HF and deployment server

santosh11
New Member

Dear All,

We are adding one HF more HF to our system and planning to build Deployment server as well. So we have 3 HF and 1 deployment server.

HF may further increase in coming days.

Do i need to keep the replication between HF's? If yes what will be the performance impact?

And if No then if one HF goes down then how will the system work?

Regards,
Santosh

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi santosh11,
no there isn't any replication mechanism in HFs, but you can manage your HFs with your Deployment Server, in this way you're sure that all the HFs have the same configurations.
Remember to manage all the configurations files using Deployment Server, also outputs.conf and deploymentclient.conf .

Ciao.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi santosh11,
no there isn't any replication mechanism in HFs, but you can manage your HFs with your Deployment Server, in this way you're sure that all the HFs have the same configurations.
Remember to manage all the configurations files using Deployment Server, also outputs.conf and deploymentclient.conf .

Ciao.
Giuseppe

0 Karma

santosh11
New Member

Thank you Giuseppe.

Regards,
Santosh

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...