I inherited a one SH and 2 indexers , 1 LM, one Deployment server supporting forwarders. I have too on board data and not sure if I have to go to each indexer to update indexes.conf a...
I need details about what to check before I upgrade so I know if my deployment is ready to upgrade. What do I monitor, and how do I benchmark system health before the upgrade?
My current Splunk setup is a cluster of 3 indexers, one in each region. One Master, two Peers. With distributed search enabled between them. My next goal is to create HighAvailability Splunk e...
We are deploying a Splunk HighAvailabilityCluster in AWS, where we have one master node, one search head and 3 peer nodes. I like to know how to provide HA for the Master and Search node. Can AMI b...
We need a HighAvailability (HA) Splunk Environment. The ideal architecture would be Distributed Clustered Deployment + SHC - Single Site (C3 / C13), which includes a 2-node IndexerCluster, 3-node S...
I am in the process of setting up a distributed clustered deployment that spans 3 different sites. The deployment will live on virtual environment using VMware vSphere. I have determined the r...
...cluster)
My question is in regards to backing up data on each non-indexer VM, and restoring it if needed.
I am striving for a high-availability Splunk installation. I understand I cannot r...
...e any data duplication at indexer level if we use 2 HF at each site.
3) How we can achive Highavailability at Heavy Forwarders layer at each site will there be any fail-over mechanism required....
I installed Spunk Enterprise on a VM "Win Server 2012" on ESXI server.
How can I ensure a highavailability on Splunk servers using VMware (2 ESXI Servers) ?
Thank you,
Hi All ,
So I have two indexers in a cluster with CM
Two SH's in a cluster with a deployer
SH cluster is connected to CM .
I see Indexer's having high CPU alerts.
Sometimes Indexer01 h...