For details, see:
Create a Splunk SOAR (On-premises) cluster using a privileged installation
Build a cluster, putting each of the services on its own server or group of servers to serve multiple cluster nodes of Splunk SOAR (On-premises).
Number | Task | Description |
---|---|---|
1 | Create the HAProxy server. | Use the HAProxy server to be a load balancer for the Splunk SOAR (On-premises) nodes in your cluster. See Set up a load balancer with an HAProxy server. |
2 | Create the PostgreSQL server or cluster. | Establish a PostgreSQL database server or cluster to store Splunk SOAR (On-premises) information. See Set up an external PostreSQL server. |
3 | Create the file shares server. | Splunk SOAR (On-premises) will store all its shared files on the prepared GlusterFS server. You can use NFS or other network file system. Instructions for that are not included in this document. See Set up external file shares using GlusterFS. |
4 | Install Splunk Enterprise. | Splunk SOAR (On-premises) will use Splunk Enterprise for searches and collect data for indexing using the HTTP Event Collector. See Set up Splunk Enterprise. |
5 | Install Splunk SOAR (On-premises) cluster nodes. |
|
About Splunk SOAR (On-premises) clusters | Create a Splunk SOAR (On-premises) cluster using an unprivileged installation |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.3.1, 5.3.2, 5.3.3, 5.3.4, 5.3.5
Feedback submitted, thanks!