Getting Data In

Install Splunk on Windows cluster?

olsenf
New Member

Can I install the Splunk service on a clustered service in Windows 2003 cluster? And if so, what is the best practice? I assume install it on a shared clustered drive, but also installed on both server instances? I'm hoping someone has done this before and has the correct "cookbook".

Thanks.

Tags (2)
0 Karma

ftk
Motivator

I personally have not done it, but someone else may have done it. I am not quite sure what you are trying achieve with this, can you explain a bit? The reason I am asking is that there may be Splunk native tools to help you reach your goals. If your goal is more number crunching, it may be better to set up multiple Splunk indexers, and load balance all incoming data across your indexers. Then use a search head to search all these indexers. If your goal is HA, again multiple indexers may be a better way to go, and just clone the data in such a way that all indexers receive the same data.

Both these setups are easy to achieve using Splunk forwarders.


For more info on possible splunk architectures you can check the following links: http://www.splunk.com/base/Documentation/4.1.5/Installation/CapacityplanningforalargerSplunkdeployme...

http://www.splunk.com/base/Documentation/latest/Admin/Whatisdistributedsearch

http://www.splunk.com/base/Documentation/latest/Admin/Clonedata

http://www.splunk.com/base/Documentation/latest/Admin/Setuploadbalancing

http://www.splunk.com/base/Documentation/latest/Admin/Advancedindexingstrategy

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...