Discover, share, and install apps and add-ons with the Splunk community on Splunkbase. Publish your own or add others to your Splunk platform instance.
Streamline your security operations with a SOAR system that integrates orchestration, playbook automation, and case management to enhance threat response.
Access and share apps and add-ons with the Splunk community on Splunkbase. Publish your own apps, or download and install others on your Splunk platform instance.
Use the following steps to validate a new physical-separation configuration. Validate the deployment after initial configuration, scaling, restart, and recovery operations. Perform the following checks:
Send test data through HEC and S2S inputs configured to use the IngestorCluster.
Confirm that the IngestorCluster processes and publishes the data through SmartBus.
Confirm activity in the queue and ingestion object store.
Confirm that the separate indexer cluster retrieves and indexes the data.
Search for the test events.
Scale the ingestion tier and verify that new IngestorCluster pods become ready.
Confirm that the expected data is searchable after recovery.