Deployment Architecture

Run 2 Instances of Splunk on Same Server

andrewkenth
Communicator

I'm fairly certian you can run 2 instnaces of Splunk on the same server. What are some of the configurations I need to take into account when doing this? How difficult is it?

Thanks!

Tags (1)
0 Karma
1 Solution

Ayn
Legend

There is an excellent page on the community wiki that has lots of info on this. Here: http://wiki.splunk.com/Community:Run_multiple_Splunks_on_one_machine

View solution in original post

Ayn
Legend

There is an excellent page on the community wiki that has lots of info on this. Here: http://wiki.splunk.com/Community:Run_multiple_Splunks_on_one_machine

nickstone
Path Finder

is there anything new to add to this post in terms of SplunkWeb and creating a new service with sc.exe? I want to test multiple apps accross different versions where splunkd may or may not be of value (with the exception of supporting different splunkweb versions)

0 Karma

laithmurad
Path Finder

@gkanapathy I tried using the same method for splunkweb, but it didn't work! splunkd is working fine, I changed the httpport to 8001 in the web.conf.

Is there anything else not mentioned in the article that I should do?

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

Oh and if you're running on Windows, it's possible, but not really supported: http://wiki.splunk.com/Community:RunningMultipleInstancesWindows Note that article is also slight incomplete as it only talks about scheduling multiple splunkd services, not multiple SplunkWeb services. In general in Windows though, if you're familiar with using sc.exe you can just set up your own services.

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

that article says to copy; I would just install it twice in different locations. if you do copy, note that the article does fail to mention that you should not copy the $SPLUNK_HOME/etc/instance.cfg file either.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...