Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Possible to get the Unix App working on a 5.x Clus...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Possible to get the Unix App working on a 5.x Cluster?
I'm looking to get the Unix App working on a Splunk 5.x cluster environment.
Anybody do this yet? Suggestions on how to do it...
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@gryz,
I familar witht he process but, the best I can do for you is point you to the documentation for each component. The setup will vary depending on your Operational requirement and budget. Be aware that 5.x Clustering duplicates the all indices on your Indexer.
Additional Reading:
Hope this helps or gets you started. Dont forget to thumbs up or accept answers that help. Cheers,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, I think what you have described is what I want.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So what you want is Distributed Search to search knowledge objects on your search head and Clustering for your indexers. Additionally you will want to use the Deployment server or Puppet to deploy your apps like the Nix app.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Both I suppose.
The indexers will need the os index on them and the Search head will need the app. I'm using the TA for *nix on the forwarders.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are talking about your search nix app or are you talking about your indexers?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
[Puzzles] Solve, Learn, Repeat: Matching cron expressions
Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass
May 2026 Splunk Expert Sessions: Security & Observability
