Splunk Enterprise

Redundant Cluster Manager Synchronization

earl-b
Engager

When adding a new cluster manager to redundant cluster manager cluster do I need to manually deploy the current manager-apps?

Labels (2)
0 Karma
1 Solution

earl-b
Engager

@richgalloway  - thanks for the response.  I just wanted to make sure that I understood correctly that the cluster bundle must be pushed to indexers before the redundant CMs get the settings.

View solution in original post

0 Karma

Mitesh_Gajjar
Explorer

Hi @earl-b ,

To achieve redundant cluster manager synchronization in a Splunk environment hosted on a Linux server, you can utilize the rsync utility. This tool will assist in syncing the primary cluster master's configuration to the standby cluster.

To manually run the synchronization, execute the following rsync command on the primary cluster master:

"rsync -avz --delete /path/to/source user@target_node_ip:/path/to/destination"

For automated configuration synchronization, you can employ the crontab utility. This allows you to schedule the rsync command to run at regular intervals, ensuring continuous synchronization between the clusters.

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The standby CM will receive the apps after they have been sent to the indexers.  If I understand the question correctly, that means you must manually deploy the cluster bundle as part of setting up CM Redundancy.  See https://docs.splunk.com/Documentation/Splunk/9.0.8/Indexer/CMredundancy#Update_the_peer_nodes.27_con...

---
If this reply helps you, Karma would be appreciated.

earl-b
Engager

@richgalloway  - thanks for the response.  I just wanted to make sure that I understood correctly that the cluster bundle must be pushed to indexers before the redundant CMs get the settings.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That's my interpretation of what's in the manual.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...