Installation

deploying a search head cluster using ansible

misha8
Observer

It seems that there needs to be a search head captain running before new members can be added to a cluster?

We're trying to automate the installation using ansible.  In ansible, we can specify which server to be the captain and its members.  However, if a server (designated to be a member) boots up, it won't be able to bring up the cluster because it isn't the captain?

How do we overcome this?  We need to start up the server running the captain first before we bring up the rest of the members?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

You must start the SHC members first and make them into a cluster.  Only then do you designate one of them to be the Captain.  See https://docs.splunk.com/Documentation/Splunk/8.2.1/DistSearch/SHCdeploymentoverview#Deploy_the_clust...

---
If this reply helps you, Karma would be appreciated.
0 Karma

misha8
Observer

I haven't tried starting a cluster without first starting the captain, is that possible?

When adding member, I would need to specify an existing member uri, so how is that going to work?

splunk add shcluster-member -current_member_uri <URI>:<management_port>

 

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Installing SHC members and making them into a cluster is part of the documented procedures so it must be possible.  You have to have a cluster before selecting a captain.

You can start an existing SHC in any order.  The cluster will choose its own captain.

When creating a new cluster, use the init-shcluster-config command rather than add shcluster-member.  Note that the add shcluster-member command has different parameters for adding a new SH to the cluster vs adding an SH that is be re-added.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...