Splunk Indexer Clustering Masterclass 101
Splunk Indexer Clustering Masterclass 101
Splunk Indexer Clustering Masterclass 101
Clustering
Masterclass 101
By
Splunk Mania
Date
will be announced soon.
For updates, please visit & RSVP
https://splunkmania.com/events
Splunk Mania
Topics Covered
What is Indexer? Index? Bucket?
How the Splunk Indexer Stores Indexes?
Why do we need Indexer Clustering?
How to select the size of an Index?
How to select the number of Indexes?
How to select the size of an Indexer?
How to select the number of Indexers?
What is the Replication Factor & Search
Factor?
How Indexing works in an Indexer Cluster?
How Search works in an Indexer Cluster?
How to Create an Indexer Cluster?
Using Splunk Web
Using Splunk Config Files
Using Splunk CLI
Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania
Topics Covered
How to Deploy Apps to Indexer Clusters?
Step-1: Prepare the files & Apps for the
configuration bundle
Step-2: Move the files and apps into
the configuration bundle on the
manager node
Step-3: Validate the bundle and
check restart
Step-4: Apply the bundle to the peers
How to Create Indexes in Indexer
Clusters?
Step-1: Edit indexes.conf
Step-2: Push the bundle to peers
Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania
Topics Covered
How to Clean Indexes in Indexer Clusters?
Step-1: Add a Lower retention policy to
indexes
Step-2: Deploy the bundle to peer
nodes
Step-3: Check the index
Step-4: Remove the Lower retention
policy of the Indexes
Step-5: Deploy the bundle
What is Bucket Fixing Activity in Splunk?
What is Maintenance mode in Splunk?
Enable maintenance mode
Disable maintenance mode
Check maintenance mode
Date
will be announced soon. For updates, please visit
& RSVP https://splunkmania.com/events
Splunk Mania
Topics Covered
How does the cluster handle frozen buckets?
What happens when Cluster master is down?
What happens when 1 of the indexers/peers
is down?
What happens when 2 of the indexers/peers
are down?
What happens when all of the indexers are
down?
Indexer Cluster States
Rebalance the Indexer Cluster
Remove Excess bucket copies from the
Indexer Cluster
Put a peer into detention
Remove a peer from the manager node’s list
Date
will be announced soon. For updates, please
visit & RSVP https://splunkmania.com/events