Deployment Architecture

Is there an order of installation when building Splunk indexer and search head clusters?

rewritex
Contributor

Is there a order of installation when building a Splunk Cluster?

I have detailed links and documents about the specific items, but it's difficult to determine the order of configuration & installation.
I'm using http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/SHCdeploymentoverview as a reference.

Splunk cluster deployment order:
1. indexer cluster - master
2. indexer cluster - peers
3. search head cluster - Deployer
4. search head cluster - Members
5. search head cluster - Captain
6. integrate search cluster into indexer cluster
7. connect search heads to search peers

Thank you! -Sean

hardikJsheth
Motivator

I think the order will be
1) Indexer Master
2) Peer Nodes (Indexer)
3) Search Peer Nodes with Indexer Clusterring Enabled and pointing to Master Node
4) Search Head Deployer
5) Enable Search Head Clustering on each Search head Peer
6) Choose Search Head Captain

You may also add a Deployment Server for pushing configurations on UF /HF.

0 Karma

ChrisG
Splunk Employee
Splunk Employee
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...