Splunk Search

Where should I configure settings for Splunk DB Connect in a search head clustering environment?

a212830
Champion

Hi,

I am testing out SHC, and have a question on how DB Connect works with it. Where should I set the settings - in a conf file on the deployer, or can I do it on one of the cluster members, and it will send out the configs to all the cluster members? Same question for when I add a db connection...

0 Karma
1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Changes made directly to conf files must be propagated via the deployer.

Runtime changes made on one cluster member, such as changes made via dashboards, get replicated to all other members.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfigurationworksinSHC#How_configur...

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

Changes made directly to conf files must be propagated via the deployer.

Runtime changes made on one cluster member, such as changes made via dashboards, get replicated to all other members.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfigurationworksinSHC#How_configur...

a212830
Champion

Well, this is a gui settings option that then updates the conf files - how is that handled?

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Conf file changes made through the GUI should get replicated automatically. It's only direct editing of conf files that requires the deployer. More details on this can be found in this topic:

http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfrepoworksinSHC

a212830
Champion

Thanks!

0 Karma
Get Updates on the Splunk Community!

Meet Duke Cyberwalker | A hero’s journey with Splunk

We like to say, the lightsaber is to Luke as Splunk is to Duke. Curious yet? Then read Eric Fusilero’s latest ...

The Future of Splunk Search is Here - See What’s New!

We’re excited to introduce two powerful new search features, now generally available for Splunk Cloud Platform ...

Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today

Meet Carol Wright. She leads the Splunk Academic Alliance program at Splunk. The Splunk Academic Alliance ...