Deployment Architecture

Standalone Monitoring Console shows all roles on a Deployment Server or Search Head

Gregski11
Contributor

Seems like all of our Splunk servers are running the Monitoring Console in what I recon is the Standalone mode.

When we go to the Monitoring Console on the Cluster Master it shows all the proper roles on all our servers.  For example the Indexers are only running the Indexer role, the Search Heads are just Search Heads, the Deployment Servers are just Deployment Servers.

However on each individual server their Monitoring Consoles show each server as having all the roles including License Master.

I am a total new with Splunk with less than 2 years experience, and any time I think I know something, I discover something like this that makes me go wth.

Can someone explain to me or suggest what I should do, I hate just ignoring things, so should I make all the individual Monitoring Consoles match the roles of the servers as represented on the Cluster Mater?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Choose one instance to be your Monitoring Console and configure it in distributed mode.  It sounds like your CM is the best candidate.  Ignore the MC on all other instances and leave them in standalone mode.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...