Creating Splunk Instances

Add or modify a Splunk instance when you need to manage data.

When you add an instance, a default subclient is automatically created.

Before You Begin

  • Verify that Splunk is installed on the master node and on each indexer peer node of the cluster.
  • Obtain the master node details.
  • Obtain the master URI where Splunkd service is hosted on the master node.
  • Obtain the login credentials to log in to the Splunk URL.
  • Keep the port for Splunkd open.
  • On Linux platforms, by default, the default subclient uses the IntelliSnap Native engine (Logical Volume Manager (LVM) snapshots) for the snapshot operations.

    For Linux LVM snaps, there must be adequate free space in the LVM volume group for snapshot creation. The default COW cache size is set to 4096 MB or 5% of the volume size, whichever is greater. To increase the COW cache size, configure the nSnapCowSizeMB additional setting. For instructions on adding the additional setting, see Adding or Modifying Additional Settings from the CommCell Console.


  1. From the navigation pane, click Protect > Big data.

    The Instances page appears.

  2. Click Add server > Splunk > Instance.

    The Add Splunk server dialog box appears.

  3. In the Name box, type a name for the new instance you are creating.
  4. From the Master node list, select a Splunk node to which the software would connect to.
  5. In the Master URI box, type the master URI where the Splunkd service is hosted on the master node.
  6. Type the login credentials of the account that has admin permissions on the indexer peer nodes.
  7. From the Plan list, select a server plan.
  8. Click Save.


The software creates an instance.

What to Do Next

Add indexer peer nodes to the instance.

Last modified: 2/5/2021 6:51:45 AM