Deployment Architecture

Is it possible to install a master node and a search head on the same VM?

ameslet
Explorer

Hi Splunkers,

I am new to Splunk and I have to install and configure Splunk on three virtual machines (1 Search Head and a cluster composed of 2 indexers). I went through the Splunk documentation and saw that a master Node is required to handle the behavior of the indexer cluster.
I would like to install both instances, the master node and the search head, on the same VM even if the documentation doesn't recommend it. How could I get it done?

If this task is impossible, how could I configure an indexer without taking into account a master node as the IP address of the master node must be written in the configuration file of any indexer ?

Thanks in advance.

Alex

0 Karma

somesoni2
Revered Legend
0 Karma

ddrillic
Ultra Champion

I would also add -
http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Aboutclusters

Since the master node "just" manages the cluster, it's hard to believe that they would collide on resources, but you better monitor the server well.

0 Karma

ameslet
Explorer

Okay, thank you very much for your answers.
I was also wondering if it is mandatory to have a master node as the cluster isn't that big (only composed of two indexers).
Would it be possible to have an architecture composed of indexers' cluster without any master node ?

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...