Deployment Architecture

How to add the Search Head cluster by using an existing deployer?

Mayanakhan
Explorer

Hi ,
Have to add the 3 dedicated SH to Search Head clustering , We have already 3 SH Clusters and 6 IDXclusters and 1 deployer in our environment.
Now we have to add the new 3 dedicated search heads to New SH clusters by using existing deployer ,but it should not affect the old SHClusters,
The new one will act a separate SHC by using the existing deployer ?
Please suggest how to achieve this

Regards.
Mayana Khan

0 Karma

somesoni2
Revered Legend

A deployer can only cater one SHC. You'd need a different server for your new SHC's deployer. Read more here:
http://docs.splunk.com/Documentation/Splunk/7.1.0/DistSearch/SHCsystemrequirements#Deployer_requirem...

You can however have it on the indexer cluster master node if the load on master node ia less.

0 Karma

deepashri_123
Motivator

Hey @ Mayanakhan,

Refer this link:
http://docs.splunk.com/Documentation/Splunk/7.1.0/DistSearch/Addaclustermember
Let me know if this helps!!

0 Karma

gkumarashanmuga
Explorer

Hi@deepashri_123

My question is to Add dedicate search head to search head clustering by using existing deployer.

Now the requirement is to add new 3 dedicated search heads as SH cluster by using existing(old) deployer. it should not affect the existing Search Head cluster.

Note: We already have SH cluster environment by using one deployer

@mayurr98

Regards,
Ganesh K

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...