Hello,
We just built a new SH Cluster and put ours behind an F5.
Nothing too complicated to setup. You will need a VIP associated to URL that users can get to, ex: Splunk.Company.com
Have that forward to your Search Peers IP's
10.x.x.x, 10.x.x.x, 10.x.x.x
If you use the default ports (8000 for web), make sure you change the port forwarding.
Last, enable sticky sessions.
If you find that every time you login, it seems to reset and make you log in again, you probably are missing the sticky sessions.
Thanks,
James
... View more