Getting Data In

Indexers on windows and linux for same environment

sdevadas
Path Finder

We have 2 indexers running on Windows to monitor our production network. A search head distributes the searches across the 2 indexers.

I am planning to add a third indexer running on Linux.

I am guessing the communication between search head and indexers is isolated from the operating system and so this should not be a problem.

Would there be any problem running the indexers on different operating systems?

Thanks.

1 Solution

jbsplunk
Splunk Employee
Splunk Employee

There shouldn't be any problem with running dissimilar environments in terms of the OS platform, so your correct, this should not be a problem.

View solution in original post

ateterine
Path Finder

Were you able to mix OS in indexer cluster and if so how did you deal with slashes in index.conf?
Windows uses backward slash "\"
While Linux uses forward "/"

Thanks!

0 Karma

sroback_splunk
Splunk Employee
Splunk Employee

In indexer cluster environments, the master, search heads, and all cluster peers must run on separate machines, and each machine must be using the same operating system.

For more info, see:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Indexer/Systemrequirements#Summary_of_key_requirem...

jbsplunk
Splunk Employee
Splunk Employee

There shouldn't be any problem with running dissimilar environments in terms of the OS platform, so your correct, this should not be a problem.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...