...dministrate the Splunk indexer cluster.
My questions are
a) is it OK to roll out the same indexes.conf to all indexer peers via configuration management tool rather than indexer master?
b) It s...
...ot use deployment server or forwarder management to manageconfiguration files acrosspeer nodes (indexers) in an indexer cluster. Instead, use the configuration bundle method. You can, however, use t...
I am trying to set up HEC in a cluster, but the cluster members do not seem to be listening on the port I have designated, 8088 via the web interface.
$ nmap -p 8088 splunk01.s2prod
Star...
What are best practices for how to deploy an add-on such that different servers run the same add-on, but with slightly different configurations? A common situation is when the add-on has different i...
...ownloaded from master nor managed by local deployment client. Either define this index at the master or specify repFactor=0 on peer to skip replication.
[Critical] App='system' with replicated index='_...
...bove and use "same" forwarder certificate acrossall forwarders or have 1 certificate per app ?
4. If we manage the Forwarders configurations via Deployment Server, is it a good practice to enable S...
...he clients and we will use the configuration bundle method to push apps to the peer nodes so this DS instance will have dual duties.
More clearly, Config apps will be deployed from deployment -apps d...
...HC individually and manually add the Search Peers. Not a problem - but not exactly centrally managed and it would be possible to miss one on a given SH if you are not careful or had a lot of indexers....