Data routing is something that is becoming more common place in an enterprise. As many people are using big data platforms like Splunk to move data around their network things such as firewalls and data stream loss, sourcetype renaming by environment can become administratively expensive. There are some easier ways to get data to another data center or a different environment leveraging only Splunk and some of its more advanced features. We will delve a little deeper into the architecture in this chapter in order to subvert some firewalls, and some license restrictions.
In this chapter, we will learn about:
Splunk architecture (enterprise level):
Clustering
Multi-site redundancy
Leveraging load balancers (F5)
Failover methods
Putting it all together
Network Segments:
Production
Standard Integration Testing (SIT)
Quality assurance
Development
DMZ (a.k.a. App tier)
The data router:
Building roads and maps
Building the UF input/output paths
Building the HF input/output...