Deployment Architecture

Is there an order of installation when building Splunk indexer and search head clusters?

rewritex
Contributor

Is there a order of installation when building a Splunk Cluster?

I have detailed links and documents about the specific items, but it's difficult to determine the order of configuration & installation.
I'm using http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/SHCdeploymentoverview as a reference.

Splunk cluster deployment order:
1. indexer cluster - master
2. indexer cluster - peers
3. search head cluster - Deployer
4. search head cluster - Members
5. search head cluster - Captain
6. integrate search cluster into indexer cluster
7. connect search heads to search peers

Thank you! -Sean

hardikJsheth
Motivator

I think the order will be
1) Indexer Master
2) Peer Nodes (Indexer)
3) Search Peer Nodes with Indexer Clusterring Enabled and pointing to Master Node
4) Search Head Deployer
5) Enable Search Head Clustering on each Search head Peer
6) Choose Search Head Captain

You may also add a Deployment Server for pushing configurations on UF /HF.

0 Karma

ChrisG
Splunk Employee
Splunk Employee
Get Updates on the Splunk Community!

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...