Deployment Architecture

How to configure a deployer for a search head cluster on an existing master node of an indexer cluster?

horsefez
Motivator

Hi Splunk-Community,

As I found out through the Splunk docs, it is possible to run a deployer for a search head cluster on an existing master node of an indexer cluster.

I found a lot of documents already describing how to set up the deployer on its own.

Do I need to pay attention to anything different here? (if i want to deploy it on the master-node)
How do I configure the master node to run deployer functions?

Thanks in advance!

Kind regards,
pyro_wood

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

View solution in original post

rashi83
Path Finder

Can I upgrade splunk version on SHC members using deployer?
If so, how?

0 Karma

yannK
Splunk Employee
Splunk Employee

It's is possible, as the apps template storage folders are different
Your indexer-cluster cluster-master could be your sh-cluster deployer.

0 Karma

horsefez
Motivator

Thank you! 🙂

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

horsefez
Motivator

Kudos to you Steve! 🙂

Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...