Deployment Architecture

How to configure a deployer for a search head cluster on an existing master node of an indexer cluster?

horsefez
SplunkTrust
SplunkTrust

Hi Splunk-Community,

As I found out through the Splunk docs, it is possible to run a deployer for a search head cluster on an existing master node of an indexer cluster.

I found a lot of documents already describing how to set up the deployer on its own.

Do I need to pay attention to anything different here? (if i want to deploy it on the master-node)
How do I configure the master node to run deployer functions?

Thanks in advance!

Kind regards,
pyro_wood

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

View solution in original post

rashi83
Path Finder

Can I upgrade splunk version on SHC members using deployer?
If so, how?

0 Karma

yannK
Splunk Employee
Splunk Employee

It's is possible, as the apps template storage folders are different
Your indexer-cluster cluster-master could be your sh-cluster deployer.

0 Karma

horsefez
SplunkTrust
SplunkTrust

Thank you! 🙂

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

horsefez
SplunkTrust
SplunkTrust

Kudos to you Steve! 🙂

Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...