Splunk Indexer Clustering Masterclass 101

Download as pdf or txt
Download as pdf or txt
You are on page 1of 6
At a glance
Powered by AI
The masterclass will cover topics related to Splunk indexer clustering including how to select indexer and index sizes, configure replication and search factors, create and manage indexer clusters, deploy apps and indexes to clusters, and perform maintenance activities like cleaning indexes.

The masterclass will cover topics related to Splunk indexing, indexer clustering, deploying apps and indexes to clusters, cleaning indexes, bucket fixing activities, and maintenance mode.

The steps to create an indexer cluster in Splunk include selecting the size of indexes and number of indexes, selecting the size and number of indexers, configuring the replication and search factors, and understanding how indexing and searching works in a cluster.

Splunk Indexer

Clustering
Masterclass 101

By
Splunk Mania
Date
will be announced soon.
For updates, please visit & RSVP
https://splunkmania.com/events
Splunk Mania

Topics Covered
What is Indexer? Index? Bucket?
How the Splunk Indexer Stores Indexes?
Why do we need Indexer Clustering?
How to select the size of an Index?
How to select the number of Indexes?
How to select the size of an Indexer?
How to select the number of Indexers?
What is the Replication Factor & Search
Factor?
How Indexing works in an Indexer Cluster?
How Search works in an Indexer Cluster?
How to Create an Indexer Cluster?
Using Splunk Web
Using Splunk Config Files
Using Splunk CLI

Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania

Topics Covered
How to Deploy Apps to Indexer Clusters?
Step-1: Prepare the files & Apps for the
configuration bundle
Step-2: Move the files and apps into
the configuration bundle on the
manager node
Step-3: Validate the bundle and
check restart
Step-4: Apply the bundle to the peers
How to Create Indexes in Indexer
Clusters?
Step-1: Edit indexes.conf
Step-2: Push the bundle to peers

Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania

Topics Covered
How to Clean Indexes in Indexer Clusters?
Step-1: Add a Lower retention policy to
indexes
Step-2: Deploy the bundle to peer
nodes
Step-3: Check the index
Step-4: Remove the Lower retention
policy of the Indexes
Step-5: Deploy the bundle
What is Bucket Fixing Activity in Splunk?
What is Maintenance mode in Splunk?
Enable maintenance mode
Disable maintenance mode
Check maintenance mode

Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania

Topics Covered
How does the cluster handle frozen buckets?
What happens when Cluster master is down?
What happens when 1 of the indexers/peers
is down?
What happens when 2 of the indexers/peers
are down?
What happens when all of the indexers are
down?
Indexer Cluster States
Rebalance the Indexer Cluster
Remove Excess bucket copies from the
Indexer Cluster
Put a peer into detention
Remove a peer from the manager node’s list

Date
will be announced soon. For updates, please
visit & RSVP https://splunkmania.com/events

You might also like