All Apps and Add-ons

How should I install and configure Splunk DB Connect 2 in my current Splunk 6.1.2 environment?

tattersp
Explorer

I have a single search head and 2 indexers (not clustered) and about 100 universal forwarders that point to either indexer in case one indexer is offline.

I have Monitoring of Java Machines (JMX) loaded on only one indexer (not ideal), but is working.

I have an application using the ReST interface sending data to the other indexer (not ideal), but is working.

I now want to install DB Connect into this existing infrastructure. I am using it only to read tables on database (no writes to DB) and could use it later for database lookups.

  1. Where do I install the Resource Master Node?
  2. Where do I install the resource pool nodes?
  3. Is there a better configuration for the JMX and ReST add on's to make them more fault tolerant.

Thanks

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Hi,

I would run DB Connect on the search head in this environment and not worry about resource pool. If you want to have the configuration be more fault tolerant and you have more hardware, you could go to search head clustering and the connections will make it through a search head failure. The resource pool thing is more about scaling than fault tolerance.

tattersp
Explorer

I am running Splunk 6.1.2 on Search head and both indexers.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...