Deployment Architecture

In a Multi-Site Search head cluster, do we have to use the F5 load balancer in both Data centers?

ankithreddy777
Contributor

In a Multi-Site Search head cluster, do we have to use the F5 load balancer in both Data centers? Or do we have to use single F5 load balancer for all search heads in both Data centers?

0 Karma

woodcock
Esteemed Legend

It is entirely up to you. You don't "have to" use any load balancer at all. Or you can use one, or two.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

To nit-pick: there is no such thing as a multi-site search head cluster. What you can do is to "stretch" a search head cluster across two data centers. A single load-balancer should front all search heads in that search head cluster.

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...