Deploying a Splunk cluster on AWS using multi-site cluster feature

[rashmigonchikar]

Hi,

We need to deploy a Splunk cluster on AWS. The cluster needs to span 2 AWS availability zones for HA requirements. My questions:
- Can I use multi-site cluster feature for deploying across AZs with AZ1 being site1 and AZ2 being site2?
- What are the benefits of using multi-site clustering in AWS vs deploying a cluster across AZs without the multi-site clustering turned on?
- Does usage of multi-site cluster feature affect Search Head Clustering in any way?

Thanks

[mahamed_splunk · Accepted solution]

Yes, You can deploy multisite clustering in AWS and each site can be mapped to an AWS availability zone.

The main benefit of multisite clustering over single site clustering is that it provides automatic Disaster Recovery (DR). You can specify site specific policies (For eg, 3 copies in AZ1 and 2 copies in AZ2 etc) and the cluster master will enforce the policies.

No, the usage of multisite cluster doesn't affect SHC. These are 2 independent features to solve different problems. You can use both or one of them based on your use cases.