Splunk Enterprise

Redundant Cluster Manager Synchronization

earl-b
Engager

When adding a new cluster manager to redundant cluster manager cluster do I need to manually deploy the current manager-apps?

Labels (2)
0 Karma
1 Solution

earl-b
Engager

@richgalloway  - thanks for the response.  I just wanted to make sure that I understood correctly that the cluster bundle must be pushed to indexers before the redundant CMs get the settings.

View solution in original post

0 Karma

Mitesh_Gajjar
Explorer

Hi @earl-b ,

To achieve redundant cluster manager synchronization in a Splunk environment hosted on a Linux server, you can utilize the rsync utility. This tool will assist in syncing the primary cluster master's configuration to the standby cluster.

To manually run the synchronization, execute the following rsync command on the primary cluster master:

"rsync -avz --delete /path/to/source user@target_node_ip:/path/to/destination"

For automated configuration synchronization, you can employ the crontab utility. This allows you to schedule the rsync command to run at regular intervals, ensuring continuous synchronization between the clusters.

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The standby CM will receive the apps after they have been sent to the indexers.  If I understand the question correctly, that means you must manually deploy the cluster bundle as part of setting up CM Redundancy.  See https://docs.splunk.com/Documentation/Splunk/9.0.8/Indexer/CMredundancy#Update_the_peer_nodes.27_con...

---
If this reply helps you, Karma would be appreciated.

earl-b
Engager

@richgalloway  - thanks for the response.  I just wanted to make sure that I understood correctly that the cluster bundle must be pushed to indexers before the redundant CMs get the settings.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That's my interpretation of what's in the manual.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...

New Splunk Innovations Enhance Performance and Accelerate Troubleshooting

Splunk is excited to announce new releases that empower ITOps and engineering teams to stay ahead in ever ...