- Splunk Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- how to deploy search head and indexer
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
how to deploy search head and indexer with detailed steps
regards
smdasim
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Create your server instances (2) and Install Linux.
Install Splunk Enterprise.
Create admin user.
On the one that is to be the Search Head:
1: Configure outputs.conf to send stuff to the Indexer
2: Configure Settings -> Distributed Search -> Search Peers -> Add to be able to search data on the Indexer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Create your server instances (2) and Install Linux.
Install Splunk Enterprise.
Create admin user.
On the one that is to be the Search Head:
1: Configure outputs.conf to send stuff to the Indexer
2: Configure Settings -> Distributed Search -> Search Peers -> Add to be able to search data on the Indexer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Wookcock,
thanks for Search Head commands ,what about the indexer setup?
Regards
smdasim
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Everything is an Indexer by default. It should be listening on port 9997 out of the box.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Woodcock,
thank you !!
Much appreciated for your inputs !!!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @smdasim,
You can start from here : http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/Whatsinthismanual
Based on your environment and deployment model (distributed,cluste,etc) you shall follow the respective links.
Please lets know if you need any further assistance in any of the steps.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @smdasim, lets know if still have questions
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi renjith.nair,
Can you please give me links for basic setup required for architecture certification lab.
regards
smdasim
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As per the https://www.splunk.com/pdfs/training/splunk-architect-certification-lab.pdf
You might need a
- Deployment server
- Indexer cluster
- Forwarder Installation (automatic)
- Search head in indexer cluster
Also practice search head cluster
.conf24 | Registration Open!
ICYMI - Check out the latest releases of Splunk Edge Processor
Introducing the 2024 SplunkTrust!
