Splunk Enterprise

Different hardware in the nodes of an index cluster

cmorenobuitrago
Explorer

Hi,

 

I have 2 indexers with different hardware specifications. Is it possible to form a cluster between these 2 nodes?

I don’t see anything about it in the documentation https://docs.splunk.com/Documentation/Splunk/8.1.1/Indexer/Systemrequirements

 

Thanks in advance,

Best regards

Labels (2)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

@cmorenobuitrago, technically it works but it is better to have similar specs. 

- You can create an indexer cluster with 2 instances, minimum 3 instances are recommended if RF=2.

- Distributed searches will run at the speed of lower-spec hardware.

- You will also need another separate instance for Cluster Master.

 

If this reply helps you upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

@cmorenobuitrago, technically it works but it is better to have similar specs. 

- You can create an indexer cluster with 2 instances, minimum 3 instances are recommended if RF=2.

- Distributed searches will run at the speed of lower-spec hardware.

- You will also need another separate instance for Cluster Master.

 

If this reply helps you upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...