Getting Data In

Auto LoadBalancing possible with DNS-Alias entry?

tpaulsen
Contributor

Can we use a DNS-Alias name to use the Auto Load Balancing feature of 4.1.1. for the Forwarders? E.g.:

Name:   splunk-A
Address: 10.10.10.1
Aliases:  splunk-index

Name:   splunk-B
Address: 10.10.10.2
Aliases:  splunk-index

Name:   splunk-C
Address: 10.10.10.3
Aliases:  splunk-index

Will this work?

Tags (2)

oestreicher
Explorer

You can use A records in DNS as much as you want, no point of using aliases. Aliases might work, but A records are cleaner.

0 Karma

tpaulsen
Contributor

We implemented it, and it works like a charm.

Name:   splunk-indexers.puc.ov.otto.de
Address: 10.111.128.76
Name:   splunk-indexers.puc.ov.otto.de
Address: 10.111.128.151
Name:   splunk-indexers.puc.ov.otto.de
Address: 10.111.128.75

splunk-e.ov.otto.de     canonical name = blade798.ov.otto.de.
Name:   blade798.ov.otto.de
Address: 10.111.128.151
splunk-d.puc.ov.otto.de canonical name = blade702.puc.ov.otto.de.
Name:   blade702.puc.ov.otto.de
Address: 10.111.128.76
splunk-b.puc.ov.otto.de canonical name = blade803.puc.ov.otto.de.
Name:   blade803.puc.ov.otto.de
Address: 10.111.128.75

The data gets distributed to all three indexer. Search is done via a searh head with distributed search. I will shortly add a fourth indexer, that is behind a firewall and not part of the splunk-indexers.

ftk
Motivator

According to the Splunk 4.1 admin training I took recently, you can use a "DNS list based on a series of A records for a single host name" to configure auto load balancing.

0 Karma

jrodman
Splunk Employee
Splunk Employee

Yeah, documented is A records. This is a CNAME example. I suspect it won't work, but am uncertain.

0 Karma

ampledata
Splunk Employee
Splunk Employee

this was tested prior to the release of 4.0

0 Karma

jrodman
Splunk Employee
Splunk Employee

This has been asked before, and I thought it would Just Work but a more sysadminny person in QA said it depended. Someone was asked to test. I'll ping the appropriate parties. If the difference between A and CNAME matters to you, let us know.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...