Deployment Architecture

How to configure cookie based sticky sessions in a load balancer with search head clustering ?

murikadan
Path Finder

Hello Splunkers,

I am using an AWS Elastic Load Balancer (ELB) on top of clustered search heads. Problem that I am trying to solve is how to make the sessions sticky.

Right now I have enabled a time based stickiness, so that the ELB will route the requests to the right search head during the time interval set.

Amazon ELB also supports stickiness based on application cookies, which would be a better solution I think. If so how can I set it up using Splunk cookies ?

1 Solution

murikadan
Path Finder

Configured ELB to perform stickiness based on splunkd_443 cookie. Working now.

View solution in original post

murikadan
Path Finder

Configured ELB to perform stickiness based on splunkd_443 cookie. Working now.

jkat54
SplunkTrust
SplunkTrust

You should use the 'session_id_PORTNUMBER' cookie instead as it expires based on your UI auto-logout settings

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...