Thank you. Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected]
The Guardian Life Insurance Company of America www.guardianlife.com From: Webster <[email protected]> To: "[email protected]" <[email protected]> Date: 05/12/2014 04:43 PM Subject: RE: [NTSysADM] splunk question Sent by: [email protected] Response: Splunk has clustering built in. Think of the indexers like a RAID 5 array. If one fails, the others still have the data to deliver results. Just don't take that analogy too literally when determining the number of indexers needed to support HA as it isn't quite the same. Thanks Webster From: [email protected] [ mailto:[email protected]] On Behalf Of Christopher Bodnar Sent: Monday, May 12, 2014 2:40 PM To: [email protected] Subject: [NTSysADM] splunk question Any Splunk gurus out there? I'm new to the product, but have been asked to look over a proposed architecture. As I'm reading through the documentation I've read about "clusters". The guy that put together the architecture for us, says we don't need a cluster. That all of the HA and fail over capabilities are built in. To me that didn't seem right, considering how much their documentation talks about clustering. Initial config is to include: (2) Search heads (7) Indexers (1) deployment server So the question is don't we need a cluster for HA? Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected] The Guardian Life Insurance Company of America www.guardianlife.com ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.
