Deployment Architecture

How to configure a deployer for a search head cluster on an existing master node of an indexer cluster?

horsefez
Motivator

Hi Splunk-Community,

As I found out through the Splunk docs, it is possible to run a deployer for a search head cluster on an existing master node of an indexer cluster.

I found a lot of documents already describing how to set up the deployer on its own.

Do I need to pay attention to anything different here? (if i want to deploy it on the master-node)
How do I configure the master node to run deployer functions?

Thanks in advance!

Kind regards,
pyro_wood

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

View solution in original post

rashi83
Path Finder

Can I upgrade splunk version on SHC members using deployer?
If so, how?

0 Karma

yannK
Splunk Employee
Splunk Employee

It's is possible, as the apps template storage folders are different
Your indexer-cluster cluster-master could be your sh-cluster deployer.

0 Karma

horsefez
Motivator

Thank you! 🙂

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Just set up the deployer on the same instance as the master node. The process is essentially the same as if you set it up on a totally idle instance. Configuration info starts here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCdeploymentoverview#2._Set_up_the_dep...

You can also look here: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/PropagateSHCconfigurationchanges#Choose...

Be sure to set the pass4SymmKey for the deployer functionality under the [shclustering] stanza of server.conf. It must match the key used by the search head cluster members. This key can be different from the key used by the master node functionality, which you set under the [clustering] stanza.

Note that you will need to restart this instance.

To ensure that the deployer functionality is compatible with the master node functionality, read: http://docs.splunk.com/Documentation/Splunk/6.3.2/DistSearch/SHCsystemrequirements#Deployer_requirem...

horsefez
Motivator

Kudos to you Steve! 🙂

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...