Test cases for Splunk configuration/desgin/architecture

[rajeev_ku]

Hi,

I have installed and configured Splunk as per below design.

Replication factor - 3
Search Factor - 2
Indexer cluster with 3 node and 1 master node.
Search Head Cluster - 2 (plus master node as deployer server)
1 deployment server

Please share if you have test cases to test Splunk design, connectivity and configuration.

Thanks
Rajeev

[gfuente]

Hello

Maybe you have a typo in your question, but you can´t have a SHC with 2 SHs, you need at least 3

Regards

[rajeev_ku]

my bad
Search Head Cluster - 2 (plus master node as deployer server - total -3)

[gfuente]

No, 3 SHs plus the deployer (shared in the master in your case)ç

check this:

http://docs.splunk.com/Documentation/Splunk/6.4.2/DistSearch/SHCsystemrequirements

For example, if your replication factor is either 2 or 3, you need at least three instances.

The minimum number of instances for a SHC is 3

[rajeev_ku]

I have 3 node SHC. with replication_factor - 3 and search_factor - 2

[rajeev_ku]

Hi Gfuente,
pls share test cases if you have.

[gfuente]

Maybe you can use this app to benchmark your architecture

https://splunkbase.splunk.com/app/749/

Regards