Deployment Architecture

How to configure a deployer for a search head cluster on an existing master node of an indexer cluster?

horsefez
Motivator

Hi Splunk-Community,

As I found out through the Splunk docs, it is possible to run a deployer for a search head cluster on an existing master node of an indexer cluster.

I found a lot of documents already describing how to set up the deployer on its own.

Do I need to pay attention to anything different here? (if i want to deploy it on the master-node)
How do I configure the master node to run deployer functions?

Thanks in advance!

Kind regards,
pyro_wood

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

View solution in original post

rashi83
Path Finder

Can I upgrade splunk version on SHC members using deployer?
If so, how?

0 Karma

yannK
Splunk Employee
Splunk Employee

It's is possible, as the apps template storage folders are different
Your indexer-cluster cluster-master could be your sh-cluster deployer.

0 Karma

horsefez
Motivator

Thank you! 🙂

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

horsefez
Motivator

Kudos to you Steve! 🙂

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...