Deployment Architecture

Heavyforwarder in HA

ayushchoudhary
Path Finder

I want to achieve HA for Splunk Heavy forwarder.
I have to deploy 2 Heavyforwarder in HA. The UF can send the load balanced data, for syslog i will use external load balancer.
But i am stuck on 1 thing. How the logs/events will be load balanced is i install Splunk App on the Heavyforwarder? Is there any solution if i want to use any Splunk App on Heavyforwarder in HA.
If i install same splunk App on both the heavyforwarder then the data will be duplicated?

Tags (1)
0 Karma

Mayurmpatil
Path Finder

If you want install app like db connect on HF , then you will have to install it only on one HF.
Generally , I keep all my apps on one HF and other HF for receiving events for UF.syslog,HEC,fuentd..

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...