Hi,
We are currently using DB Connect to index a couple of different datasets from Oracle. If I put it on a Search Head Cluster, will the database inputs work like other search jobs and be spread out across the cluster (and obviously not duplicate data)?
Hi,
Only the captain will execute the db query.
http://docs.splunk.com/Documentation/DBX/2.1.3/DeployDBX/Distributeddeployment
"Splunk DB Connect 2.0.0 and later supports deployment in a search head clustering environment. In a search head cluster, DB Connect is deployed to all cluster members, but only runs on the search head cluster captain"
Hope i help you