Hi Gurus~!
We understand managing INDEXERs should be done by the replication master. But when there are so many indexers to manage, like 50+ indexers and 5+ replication master across 5 continent, it makes us curious if we can use deployment server to manage replication master so those masters can distrubute application.
I am sure this is not a common challenge due to the size of the deployment, but technically what would be feasible. I would appreciate expert's recommendations.
In order to simplify multi splunk cluster environment, ( like 5 masters, and 50+ indexers )
Appreciate experts feedback on above 3 choices.
The recommended approach is to use replication master to control all the indexers.
You can use option #2 as well, but you need to make sure that the DS doesn't restart replication master after pushing the configs.