Hi,
We are sizing a Splunk infrastructure and I was looking at this page :
Summary of performance recommendations
https://docs.splunk.com/Documentation/Splunk/7.3.2/Capacity/Summaryofperformancerecommendations
https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Summaryofperformancerecommendations
On this page, there is an example of Splunk cluster with - 1 SH - 2 indexers
But in the "cluster administration course, it is explicitly said: - the master nod must be run a dedicated node - the master cannot be shared with the search head node So the minimum cluster should be : - 1 SH - 2 indexers - 1 Master
Can someone explain this to me? - Why there is no master node on the recommendation page? -If it's possible to share the search head and cluster master in production
Best regards
Pierre
... View more