Splunk DFS Manager overview
The Splunk DFS Manager app enables you to run Data Fabric Search (DFS). The app bundles, installs, and configures the compute cluster for your DFS deployment automatically. Additionally, the app helps you to continuously and seamlessly manage, configure, and monitor your compute cluster and customize the resource allocation within your DFS deployment from any search head through a scalable and adaptive user interface to run a DFS search.
Splunk only provides support for a compute cluster that is deployed using the Splunk DFS Manager app. If you install your compute cluster manually, Splunk isn't responsible for the support or maintenance of the compute cluster.
You can use the app irrespective of your deployment scenario and install the compute cluster on a standalone search head, standalone indexer, search head cluster, or an indexer cluster.
The Splunk DFS Manager app provides the following capabilities:
- High availability that allows an alternate search head captain to restart DFS master, in case a search head captain fails
- Add DFS workers on all or selected search peers
- Remove a DFS worker
- Restrict adding DFS workers to a particular site in a multi-site environment
- Monitor the health and resource usage of the compute cluster
- Enable compute cluster security
You must have administrator privileges to use the Splunk DFS Manager app to add or remove DFS workers or change the compute cluster settings.
The default compute cluster master port is 8008 to launch DFS jobs and connect DFS workers. The default Web UI port is 8009 to view the compute cluster.
Allow only the search heads in the search head cluster and the search peers to access the compute cluster master and the Web UI port. You can block all other nodes from accessing the master and the Web UI port by using iptable and firewall rules.
Contact Splunk Services if you run into issues trying to configure your compute cluster using the Splunk DFS Manager app.
Discuss the app for Splunk DFS Manager on Splunk Answers.
If you have a support contract, submit a case using the Splunk Support Portal.
For general Splunk platform support, see the Support and Services page.
Install Splunk DFS Manager
This documentation applies to the following versions of Splunk® DFS Manager: 1.0.0, 1.1.0