Hi, i have a problem with sending one index from indexercluster to another standalone Splunk instance. I have a 4 indexers, replication factor = 3 . How should I configure my cluster to send o...
What is the difference between Cluster master and License master in a distributed Environment?
Any major differences and detailed explanation of both would be great.
...bandoning theindex_master for distributing theindexes.conf file and managing by myself the hand copy/edit ofthe various index files and rolling-restart oftheindexers?
Thanks,
Hi to everyone
I have a design, with four Splunk instances (two search head, and two indexers). I want an "indexercluster" (for replication and fault tolerance), and a "search head cluster" (f...
My current Splunk setup is a clusterof 3 indexers, one in each region. One Master, two Peers. With distributed search enabled between them. My next goal is to create High Availability Splunk e...
What's the recommended best practice to architect a Windows universal forwarder to an indexercluster? Is it better to forward all the Windows UF data to a VIP or just have them go straight to theindexers?
Hello everyone. Currently I have a clusterarchitectureof Splunk Enterprise 8.0.7. SH cluster + IndexerCluster + Master Node + Deployer, all ofthem in Windows. Now I have to d...
...onna use a new host for each server. Thearchitecture includes: - 1 cluster master - 1 deployment servers - 1 search head - 2 indexers (cluster) - 1 poller (heavy forwarder) - n universal f...