Deployment Architecture

Are there any issues with running a Search Head Cluster Deployer and a multisite Indexer Cluster Master on the same instance?

ctripod
Explorer

I'm wondering if there are any issues with running Deployer (for search head clustering) on the same instance as a multi-site Indexer cluster Master. I'd like to have a single instance run as the Deployer, Indexer Cluster Master, and License Master.

Steve_G_
Splunk Employee
Splunk Employee

This section of the documentation provides some details on cluster master/deployer compatibility:

http://docs.splunk.com/Documentation/Splunk/6.3.0/Indexer/Systemrequirements#Additional_roles_for_th...

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi ctripod, you won't have any issues running those three services on the same box. I've personally worked with an environment that has the indexer CM and SHCluster Master on the same box. The license master should be no problem.

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...