Configure search head clustering
If you have at least three Hunk instances licensed for Hunk and Splunk Enterprise, you can configure search head clustering for Splunk. You can configure search head clustering by:
- Manually copy
indexes.confon all the instances manually, and maintain the information across all the members of the search head cluster. (Not recommended)
- Using the search head cluster deployer functionality to update the index configuration. (recommended)
To learn more about the Deployer and search head clustering architecture, see About search head clustering.
Install and configure using the Deployer
1. Install and configure a Deployer on the instance that is NOT part of your search head cluster.
2. On the Deployer create the configuration you want to propagate. For example, to deploy an
indexes.conf configuration from a search app to all the members of a search head cluster, you would create a search app in the following directory for the instance that is the Deployer:
3. Go to:
4. Create or edit
props.conf (if applicable) and any other files you may have created for Hunk and need to propagate across the cluster.
5. Run the following command:
SPLUNK_HOME/bin/splunk apply shcluster-bundle -target https://<any_member_SHC>:<mgmt_port> -auth admin:<password>
6. Read the warning and click OK. Splunk performs a rolling restart on the members of the search head cluster and should restart with your propagated deployment.
Note that you cannot perform another deployment until rolling restart is initiated and completed. If you are unsure if rolling restart has been completed, you can run
SPLUNK_HOME/bin/splunk show shcluster-status on any members and check that all the instance are up and in the cluster.
Configure Parquet connectivity
Explore and configure Hadoop source files in the HDFS Explorer
This documentation applies to the following versions of Hunk®(Legacy): 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.10, 6.2.11, 6.2.12, 6.2.13, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11