Deployment Architecture

more than one indexer on single instance??

AzmathShaik
Path Finder

Hello

we are working on a test environment for this we want to use minimum number of instances to configure them as search heads and peer nodes. so can i have two indexers on same instance (say that i have a machine vm1, on which i want to configure two indexers IDX1,IDX2 and vm2 as SH1 and SH2 ) is this possible to do?? and if it is possible please can any one guide me in doing so.

0 Karma

jplumsdaine22
Influencer

I believe technically you could, but I don't see the point - these are vms so just make smaller instances. Do you have a limitation on the number of vms you can run?

If you do want to go ahead with it I guess just unzip the tar into different directories and give them different management ports when you start them up. You'll also need to configure different ports for all the inputs. And you'll need to change the web server port as well.

In fact you'll probably need to change every 4 digit number in all the configs, as the limits.conf will probably be breached depending on how much disk space you're going to devote to the vm

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...