Splunk® DFS Manager

User Manual

Download manual as PDF

This documentation does not apply to the most recent version of DFSManager. Click here for the latest version.
Download topic as PDF

Splunk DFS Manager overview

The Splunk DFS Manager app enables you to run Data Fabric Search (DFS). The app bundles, installs, and configures the compute cluster for your DFS deployment automatically. Additionally, the app helps you to continuously and seamlessly manage, configure, and monitor your compute cluster and customize the resource allocation within your DFS deployment from any search head through a scalable and adaptive user interface to run a DFS search.

Splunk only provides support for a compute cluster that is deployed using the Splunk DFS Manager app. If you install your compute cluster manually, Splunk isn't responsible for the support or maintenance of the compute cluster.

You can use the app irrespective of your deployment scenario and install the compute cluster on a standalone search head, standalone indexer, search head cluster, or an indexer cluster.

The Splunk DFS Manager app provides the following capabilities:

  • High availability that allows an alternate search head captain to restart DFS master, in case a search head captain fails
  • Add DFS workers on all or selected search peers
  • Remove a DFS worker
  • Restrict adding DFS workers to a particular site in a multi-site environment
  • Monitor the health and resource usage of the compute cluster
  • Enable compute cluster security

You must have administrator privileges to use the Splunk DFS Manager app to add or remove DFS workers or change the compute cluster settings.

Port security

The default compute cluster master port is 8008 to launch DFS jobs and connect DFS workers. The default Web UI port is 8009 to view the compute cluster.

Allow only the search heads in the search head cluster and the search peers to access the compute cluster master and the Web UI port. You can block all other nodes from accessing the master and the Web UI port by using iptable and firewall rules.


Contact Splunk Services if you run into issues trying to configure your compute cluster using the Splunk DFS Manager app.

Discuss the app for Splunk DFS Manager on Splunk Answers.

If you have a support contract, submit a case using the Splunk Support Portal.

For general Splunk platform support, see the Support and Services page.

Install Splunk DFS Manager

This documentation applies to the following versions of Splunk® DFS Manager: 1.0.0, 1.1.0

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters