Giters

splunk / splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SH: Support Multiple Clusters

dp-42 opened this issue · comments

commented

Hello,

I have setup an Indexer cluster (including an Cluster Manager) and also my Search Head is connected to the Indexer Cluster (via CM).
Now, I have the use case that I want to setup a second Indexer Cluster. Therefore my Search Head needs to connect to the second Indexer cluster as well.

Unfortunately, this is currently not supported - at least, that´s how I understood it:

The corresponding code should be roles/splunk_search_head/tasks/setup_multisite.yml.
splunk.multisite_master is a simple string, therefore it is not possible to add multiple masters.

So I would like to ask for adding this feature - what is your opinion on that use case?

I would also be interested in contributing this if you think it make sense. My initial idea (without actually testing it (yet)) would be to turn splunk.multisite_master to an array and iterate over all the configured clusters. Unfortunately, the variable is also used for the indexer role and here I think it not possible that an indexer joins multiple clusters, so that is something that needs to be considered...

Kind regards,
Daniel

commented

Would this be possible through #464?

commented

Hi @nwang92

thank you for your fast reply.

It took me some time to check the mentioned auxiliary_cluster_masters setting.
Unfortunately, I am running Multisite Clusters - so this does not work for me.

I ended up building the required settings blocks using the conf section. That worked for me.

Many thanks!
Daniel