Splunk Geo Redundant setup Best Practices

3soperations · ‎07-05-2022

Hi,

We are looking for some help on GR (Geo Redundant) Splunk setup. Has anyone already have such an architecture implemented in your/customer environment.

Did we follow any reference architectures published by SPLUNK. Appreciate if you can share some ideas.

Thanks in Advance.

richgalloway · ‎07-05-2022

See the Splunk Validate Architecture "Distributed Clustered Deployment + SHC - Multi-Site (M4 / M14)" at https://www.splunk.com/pdfs/technical-briefs/splunk-validated-architectures.pdf

Not reflected in that diagram is Splunk 9.0 supports backup Cluster Manager (CM) instances.

---
If this reply helps you, Karma would be appreciated.

Splunk Geo Redundant setup Best Practices

indexer clustering

search head clustering

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

Announcing Modern Navigation: A New Era of Splunk User Experience

Join the Conversation

Splunk Geo Redundant setup Best Practices

indexer clustering

search head clustering

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

Announcing Modern Navigation: A New Era of Splunk User Experience