All Apps and Add-ons

DB_Connect in a distributed server environment

kartiksplunk
New Member

I have successfully deployed the db_connect app in a single server instance of splunk.
My questions here are regarding the deployment of db_connect in a distributed server splunk environment.

The docs suggest this:
"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain. To install, use the deployer to distribute DB Connect to all of the search head cluster members. Be aware that you must use the cluster deployer, not Deployment Server, to distribute DB Connect to search head cluster members."

Now I have this environment:
One Deployer
Two heads
Head1
Head2
One Peer Master
Three peers
peer1
peer2
peer3

Which "deployer" is the documentation talking about, do I have it or not? Thanks in advance.

0 Karma

ChrisG
Splunk Employee
Splunk Employee

It is referring to the cluster deployer, see Use the deployer to distribute apps and configuration updates in the Distributed Search manual.

0 Karma

kartiksplunk
New Member

Well the docs say that the db_connect should be installed on the splunk heads, and suggest using a deployment server to do so (I may have read it incorrectly), however, this page:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Updating/Aboutdeploymentserver
says:
"You cannot use the deployment server to update indexer cluster peer nodes or search head cluster members."

0 Karma

ChrisG
Splunk Employee
Splunk Employee

The topic you quoted in your original question contains the following:

Note: Splunk DB Connect is incompatible with Deployment Server. Do not attempt to distribute DB Connect using Deployment Server.

This note is immediately above the passage you quoted.

The topic in the Distributed Search manual that I referred to is also linked to from the topic you quoted (although I admit there are a lot of links in that topic).

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...