Deployment Architecture

Is there an order of installation when building Splunk indexer and search head clusters?

rewritex
Contributor

Is there a order of installation when building a Splunk Cluster?

I have detailed links and documents about the specific items, but it's difficult to determine the order of configuration & installation.
I'm using http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/SHCdeploymentoverview as a reference.

Splunk cluster deployment order:
1. indexer cluster - master
2. indexer cluster - peers
3. search head cluster - Deployer
4. search head cluster - Members
5. search head cluster - Captain
6. integrate search cluster into indexer cluster
7. connect search heads to search peers

Thank you! -Sean

hardikJsheth
Motivator

I think the order will be
1) Indexer Master
2) Peer Nodes (Indexer)
3) Search Peer Nodes with Indexer Clusterring Enabled and pointing to Master Node
4) Search Head Deployer
5) Enable Search Head Clustering on each Search head Peer
6) Choose Search Head Captain

You may also add a Deployment Server for pushing configurations on UF /HF.

0 Karma

ChrisG
Splunk Employee
Splunk Employee
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...