Splunk Search

Where should I configure settings for Splunk DB Connect in a search head clustering environment?

a212830
Champion

Hi,

I am testing out SHC, and have a question on how DB Connect works with it. Where should I set the settings - in a conf file on the deployer, or can I do it on one of the cluster members, and it will send out the configs to all the cluster members? Same question for when I add a db connection...

0 Karma
1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Changes made directly to conf files must be propagated via the deployer.

Runtime changes made on one cluster member, such as changes made via dashboards, get replicated to all other members.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfigurationworksinSHC#How_configur...

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

Changes made directly to conf files must be propagated via the deployer.

Runtime changes made on one cluster member, such as changes made via dashboards, get replicated to all other members.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfigurationworksinSHC#How_configur...

a212830
Champion

Well, this is a gui settings option that then updates the conf files - how is that handled?

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Conf file changes made through the GUI should get replicated automatically. It's only direct editing of conf files that requires the deployer. More details on this can be found in this topic:

http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/HowconfrepoworksinSHC

a212830
Champion

Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...