Hi
We are sizing a splunk infrastructure and i was looking at this page :
[**Summary of performance recommendations**][1]
https://docs.splunk.com/Documentation/Splunk/7.3.2/Capacity/Summaryofperformancerecommendations
https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Summaryofperformancerecommendations
On this page there are example of splunk cluster with
- 1 SH
- 2 indexers
But in the "cluster administration course" it is explicitly said that
- the master nod must be run a a dedicated node
- the master cannot be shared with the search head node
So the minimum cluster should be :
- 1 SH
- 2 indexers
- 1 Master
Can some one explain me
- why there is no master node in the recommendation page ?
- if it's possible to share the search head and cluster master in production
Best regards
Pierre
[1]: https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Summaryofperformancerecommendations
↧