Deployment Architecture

Splunk SmartStore for Single Site Indexer Cluster spanning across two AWS Regions

sosusa
Engager

Can Splunk SmartStore enabled with single site Indexer clustering which is spanning across two AWS regions?  Ex: One set of Indexer Cluster located in AWS Region A and another Set of Indexer Cluster sitting in Region B, Can one s3  Remote Object Store used with all Indexers from both Clusters?  Thanks.

Labels (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

I don't see why not. From Splunk's perspective it's just a remote storage regardless of where the indexers are. As long as you have network connectivity you should be fine.

I suppose it might cost you more if you have inter-region traffic instead if intra-region one but I'm not that good on AWS pricing to say somethig definite here. And it's an issue completely outside of Splunk.

View solution in original post

PickleRick
SplunkTrust
SplunkTrust

I don't see why not. From Splunk's perspective it's just a remote storage regardless of where the indexers are. As long as you have network connectivity you should be fine.

I suppose it might cost you more if you have inter-region traffic instead if intra-region one but I'm not that good on AWS pricing to say somethig definite here. And it's an issue completely outside of Splunk.

Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...