Deployment Architecture

Two DMCs on Two different Splunk Deployers monitoring same set of indexers and deployment servers

burwell
SplunkTrust
SplunkTrust

We have 2 Search Head Clusters: a production and a stage cluster. Both share the same set of indexers but obviously the search heads are only associated with one SHC. There are separate deployers for each SHC.

I have the Distributed Management Console enabled on our production SHC deployer.

Would there be any issues with enabling DMC on the stage SHC deployer as well well? This DMC would share the same set of indexers as production, the same set of deployment servers, but obviously only the heads for the stage SHC.

kscher
Path Finder

We have a similar setup. I would only add that it seems like DMC console runs scheduled searches; which if true, is not surprising. So each additional running DMC would add some amount - hopefully small - of overhead.

0 Karma

ddrillic
Ultra Champion
0 Karma

hexx
Splunk Employee
Splunk Employee

I don't foresee any issues with the setup you're describing - two DMCs in distributed mode should be able to monitor the same deployment independently as long as they are correctly configured individually.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...