Deployment Architecture

Can you help me with my search head replication?

rajkumarv
Engager

Hi,

We have two search heads that will be configured in active and standby using the load balancer. Are there any custom scripts available to take incremental backups of the configuration and KV store from the primary node and replicated to standby?. Please advice.

Also please advice: is there a way to configure HA in Search head itself without clustering?

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Back up configuration information
All Splunk's configuration information is contained in configuration files. To back up the set of configuration files, make an archive or copy of $SPLUNK_HOME/etc/. This directory, along with its subdirectories, contains all the default and custom settings for your Splunk install, and all apps, including saved searches, user accounts, tags, custom source type names, and other configuration information.

Copy this directory to a new Splunk instance to restore. You don't have to stop Splunk to do this.

http://docs.splunk.com/Documentation/Splunk/7.1.0/Admin/Backupconfigurations

please advice is there a way to configure HA in Search head itslef without clustering
HA - high availability comes with Clustering OR load balancing.

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...