Hello I have couple of issues regarding Shuttl with HDFS archiving . situation is as follows.
i have a CDH3 cluster and on another machine i have my splunk indexer where i have put shuttl app. I have also copied core and guava-r09-jarjar.jar to $SPLUNK_HOME/etc/apps/shuttl/lib as per requirement.
first thing arises is , is this a correct architecture for Splunk shuttl deployment.
secondaly , while configuring xmls (archiver.xml,server.xml,splunk.xml) which configuration file should i use to point my CDH3 hosts, i.e how will my Splunk/Shuttl will know where to archive my Splunk data .
Thanks in Advance