All Apps and Add-ons

How should I install and configure Splunk DB Connect 2 in my current Splunk 6.1.2 environment?


I have a single search head and 2 indexers (not clustered) and about 100 universal forwarders that point to either indexer in case one indexer is offline.

I have Monitoring of Java Machines (JMX) loaded on only one indexer (not ideal), but is working.

I have an application using the ReST interface sending data to the other indexer (not ideal), but is working.

I now want to install DB Connect into this existing infrastructure. I am using it only to read tables on database (no writes to DB) and could use it later for database lookups.

  1. Where do I install the Resource Master Node?
  2. Where do I install the resource pool nodes?
  3. Is there a better configuration for the JMX and ReST add on's to make them more fault tolerant.


0 Karma

Splunk Employee
Splunk Employee


I would run DB Connect on the search head in this environment and not worry about resource pool. If you want to have the configuration be more fault tolerant and you have more hardware, you could go to search head clustering and the connections will make it through a search head failure. The resource pool thing is more about scaling than fault tolerance.


I am running Splunk 6.1.2 on Search head and both indexers.

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...