What needs to be setup for Disaster Recovery search head?

[ankithreddy777]

I have to set one search head at a primary data centre and another at a DR (Disaster Recovery) data centre. What things need to be setup for DR search head that replicates original search head and can be used immediately during Disaster Recovery?

[aaraneta_splunk]

@ankithreddy777 - Did the answer provided by hunters help provide a solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

[hunters_splunk]

Hi ankithreddy777,

I think you can just deploy search head clustering for HA (high availability) and DR (disaster recovery).
For information about the search head clustering architecture, please refer to documentation:
http://docs.splunk.com/Documentation/Splunk/6.5.1/DistSearch/SHCarchitecture

Hope this helps, thanks!
Hunter