About sankaraniyan1

sankaraniyan1 · ‎06-10-2020

Hi All, I have a weird requirement here but maybe some expert help might be showered . I have a set of 800+ agents distributed across 3 Data center ( 1 primary DC and 2 secondary DC) and client expects us to use SSL communication between the Datacenter. I use a Heavy Forwarder ( HF) at those 2 secondary DC to do some custom monitoring . I have the solution finalized, with Indexer cluster and SH to be at Primary DC. I am planning to use a single indexer cluster to receive data from all forwarders. Now I am looking at following query i have. 1) Can i have my Universal forwarders in the primary DC talk without SSL certificates, while communication from UF agents in other DC is with SSL ? 2) Can i have the UF's in secondary DC talk to the HF in secondary DC without SSL and Data from HF's forwarder to Indexer over SSL. Basically can I configure SSL and non SSL communication in a single set of Indexer cluster ? SKR..

sankaraniyan1 · ‎05-26-2020

Thanks Guiseppe. This helps. In case i need to enable load balancing at user front-end, what will be the health monitoring string we could configure for the load balancer ? Any recommendations will be appreciated Sank

sankaraniyan1 · ‎05-26-2020

Hi gcusello, We are using our forwarders mainly for metric data collection like cpu, memory and other applications using Add-on Apps. Ideally client team expects to use an external LB instead of the default LB functionality provided by Splunk. I couldn't find any information in splunk documentation. I would like to understand if this is configurable and the best practice or if not what are the issues .

sankaraniyan1 · ‎05-26-2020

Thanks for the response Richgalloway. Is this recommended by Splunk or is it from your implementation experience. May i know any challenges you faced ? Sank

sankaraniyan1 · ‎05-26-2020

I have a client requirement to use F5 Big IP LB for load-balancing the splunk data collection. Can anyone help me with the best /recommended method to do health check for Splunk load balancing at Indexer level. Is it using http/https or is it better to use TCP based ? Also what type of policy will be better to use ? Round robin with String based or something different ? Please help me with your kind suggestions based on the experience . Sank

sankaraniyan1 · ‎04-21-2020

Hi Jones, Where you able to complete this activity ? Skr

Posts	6
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎04-21-2020

Online Status	Offline
Date Last Visited	‎08-18-2021 01:23 AM

SSL Communication between Splunk Indexers and UF/H...

Load Balancing Splunk using F5 Load balancer

SSL Communication between Splunk Indexers and UF/H...

Re: Load Balancing Splunk using F5 Load balancer

Re: Load Balancing Splunk using F5 Load balancer

Re: Load Balancing Splunk using F5 Load balancer

Load Balancing Splunk using F5 Load balancer

Re: Can you roll colddb indexes over to Azure Blob...