Deployment Architecture

Splunk docker swarm architecture

604531fecb
Observer

I want to deploy a multisite Splunk cluster in the Docker Swarm cluster. We have 2 datacenters in different cities with the VMWare VSphere where we used to create virtual machines and install Swarm into this VMs. But now I want to create more advanced setup using Docker Swarm. I'm planning to create geo-distributed Docker Swarm cluster with 3 master VMs and 5-10 worker nodes in both VSpheres. Inside that cluster I want to deploy multisite Docker Stack with following architecture:
[site1]
1 splunk cluster master - main
2 splunk indexers
2 splunk searchheads
1 splunk searchhead captain
1 splunk deployer
[site2]
1 splunk cluster master - backup
2 splunk indexers
2 splunk searchheads
1 splunk searchhead captain

Is it good architecture for ingesting big amounts of data?
Which Docker network type should I use?
For storage I want to use Docker daemon's local storage driver on each of the Swarm VMs, is it good choice or not?

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...