Deployment Architecture

What does it exactly mean by the "search heads activities"?

saifuddin9122
Path Finder

Hello

can any one help me in understanding the search heads activities?? what all comes under it??

0 Karma

woodcock
Esteemed Legend

The search head:

Let's users search against indexed data
Controls Summary Indices
Can be the Monitoring Console
Can be the Deployment Server
Can be an Indexer (all-in-one architecture)
0 Karma

woodcock
Esteemed Legend

Where did you read this term: "search head activities"?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi saifuddin9122,
It's not so fully clear your question, do you want to know what are role and functions of Search Head in Distributed Splunk architecture?

If this is your need, You could find in Splunk documentation site many useful information
http://docs.splunk.com/Documentation/Splunk/6.5.0/DistSearch/Whatisdistributedsearch
http://docs.splunk.com/Documentation/Splunk/6.5.0/DistSearch/Whatsearchheadssend

there is also an eLearning free course that describes Splunk architecture http://www.splunk.com/view/SP-CAAAHSJ

Bye.
Giuseppe

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@saifuddin9122 - Can you please provide more context and information? Like what are you referring to when you say "it"? The more information you provide to the Answers community, the better chance that someone will be able to help you.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...