Splunk® DFS Manager

User Manual

Download manual as PDF

Splunk Data Fabric Search (DFS) is no longer available for purchase as of May 20, 2020. Splunk Enterprise 8.x customers may continue to use the free version of Splunk DFS included with their Enterprise license. Version 1.1 is the final release of Splunk DFS, and version 1.2 is the final release of the accompanying Splunk DFS Manager app. There will be no additional major or minor releases of either product. Splunk DFS 1.1 and the Splunk DFS Manager app 1.2 will be supported until the October 22, 2021 end-of-support date of Splunk DFS 1.1. See the Splunk Software Support Policy for details.
Download topic as PDF

Splunk DFS Manager overview

The Splunk DFS Manager app enables you to run Data Fabric Search (DFS). The app bundles, installs, and configures the compute cluster for your DFS deployment automatically. Additionally, the app helps you to continuously and seamlessly manage, configure, and monitor your compute cluster and customize the resource allocation within your DFS deployment from any search head through a scalable and adaptive user interface to run a DFS search.

Splunk only provides support for a compute cluster that is deployed using the Splunk DFS Manager app. If you install your compute cluster manually, Splunk isn't responsible for the support or maintenance of the compute cluster.

You can use the app irrespective of your deployment scenario and install the compute cluster on a standalone search head, standalone indexer, search head cluster, or an indexer cluster.

Splunk DFS Manager app is compatible with Python versions 2 and 3. For more information on the compatibility matrix for DFS and Splunk DFS manager app, see Compatibility matrix.

The Splunk DFS Manager app provides the following capabilities:

  • High availability that allows an alternate search head captain to restart DFS master, in case a search head captain fails
  • Add DFS workers on all or selected search peers
  • Remove a DFS worker
  • Restrict adding DFS workers to a particular site in a multi-site environment
  • Monitor the health and resource usage of the compute cluster
  • Enable compute cluster security

You must have administrator privileges to use the Splunk DFS Manager app to add or remove DFS workers or change the compute cluster settings.


Contact Splunk Services if you run into issues trying to configure your compute cluster using the Splunk DFS Manager app.

Discuss the app for Splunk DFS Manager on Splunk Answers.

If you have a support contract, submit a case using the Splunk Support Portal.

For general Splunk platform support, see the Support and Services page.

Last modified on 05 June, 2020
Install Splunk DFS Manager

This documentation applies to the following versions of Splunk® DFS Manager: 1.2.0, 1.2.1

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters