Deployment Architecture

Standalone Monitoring Console shows all roles on a Deployment Server or Search Head

Gregski11
Contributor

Seems like all of our Splunk servers are running the Monitoring Console in what I recon is the Standalone mode.

When we go to the Monitoring Console on the Cluster Master it shows all the proper roles on all our servers.  For example the Indexers are only running the Indexer role, the Search Heads are just Search Heads, the Deployment Servers are just Deployment Servers.

However on each individual server their Monitoring Consoles show each server as having all the roles including License Master.

I am a total new with Splunk with less than 2 years experience, and any time I think I know something, I discover something like this that makes me go wth.

Can someone explain to me or suggest what I should do, I hate just ignoring things, so should I make all the individual Monitoring Consoles match the roles of the servers as represented on the Cluster Mater?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Choose one instance to be your Monitoring Console and configure it in distributed mode.  It sounds like your CM is the best candidate.  Ignore the MC on all other instances and leave them in standalone mode.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...