Deployment Architecture

indexer clustering with 1 master and many peer node to auto configured using fqdn with indexer load balanced along with forwarder side work also load balanced , All this to be operate from one single search head sitting on the forwarder.

fiitgate
New Member

My Splunk experiment requirement is to configure an instance which acts like both forwarder and search head.
and indexer clustering should get configured automatically based on fqdn etc...

How to do the indexer clustering with one master and many peer indexers automatically configure through the script or any other way through Splunk yaml file also forwarder and indexer side work is autoload balanced.

If someone can share the clear details of this auto deployment would be helpful with a pointer to the right script/config file.

Regards,
Rakesh

0 Karma

adonio
Ultra Champion

try this:
https://conf.splunk.com/files/2017/slides/splunk-n-box.pdf

and this:
https://github.com/mhassan2/splunk-n-box

i am a ware there are ansible playbooks but dont know from th e top of my head where to find a published one

0 Karma
Get Updates on the Splunk Community!

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...

Use ‘em or lose ‘em | Splunk training units do expire

Whether it’s hummus, a ham sandwich, or a human, almost everything in this world has an expiration date. And, ...