https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417382#M20636 <P>Hi Wookcock,<BR /> thanks for Search Head commands ,what about the indexer setup?<BR /> Regards<BR /> smdasim</P> Sun, 15 Jul 2018 22:33:26 GMT smdasim 2018-07-15T22:33:26Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417376#M20630 <P>Hi<BR /> how to deploy search head and indexer with detailed steps<BR /> regards<BR /> smdasim</P> Mon, 02 Jul 2018 08:30:35 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417376#M20630 smdasim 2018-07-02T08:30:35Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417377#M20631 <P>Hi @smdasim,</P> <P>You can start from here : <A href="http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/Whatsinthismanual">http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/Whatsinthismanual</A></P> <P>Based on your environment and deployment model (distributed,cluste,etc) you shall follow the respective links.</P> <P>Please lets know if you need any further assistance in any of the steps.</P> Mon, 02 Jul 2018 08:38:16 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417377#M20631 renjith_nair 2018-07-02T08:38:16Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417378#M20632 <P>Hi @smdasim, lets know if still have questions</P> Wed, 04 Jul 2018 13:24:23 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417378#M20632 renjith_nair 2018-07-04T13:24:23Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417379#M20633 <P>Hi renjith.nair,<BR /> Can you please give me links for basic setup required for architecture certification lab.<BR /> regards<BR /> smdasim</P> Sun, 15 Jul 2018 07:04:02 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417379#M20633 smdasim 2018-07-15T07:04:02Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417380#M20634 <P>As per the <A href="https://www.splunk.com/pdfs/training/splunk-architect-certification-lab.pdf">https://www.splunk.com/pdfs/training/splunk-architect-certification-lab.pdf</A></P> <P>You might need a <BR /> - <A href="http://docs.splunk.com/Documentation/Splunk/7.1.1/Updating/Deploymentserverarchitecture">Deployment server</A><BR /> - <A href="https://docs.splunk.com/Documentation/Splunk/7.1.0/Indexer/Clusterdeploymentoverview">Indexer cluster</A><BR /> - <A href="https://docs.splunk.com/Documentation/Forwarder/7.1.1/Forwarder/Installanixuniversalforwarderremotelywithastaticconfiguration">Forwarder Installation (automatic)</A><BR /> - <A href="http://docs.splunk.com/Documentation/Splunk/7.1.2/Indexer/Configurethesearchhead">Search head in indexer cluster</A></P> <P>Also practice <A href="http://docs.splunk.com/Documentation/Splunk/7.1.1/DistSearch/SHCconfigurationoverview">search head cluster </A></P> Sun, 15 Jul 2018 08:20:54 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417380#M20634 renjith_nair 2018-07-15T08:20:54Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417381#M20635 <P>Create your server instances (2) and Install Linux.<BR /> Install Splunk Enterprise.<BR /> Create admin user.<BR /> On the one that is to be the Search Head:<BR /> 1: Configure outputs.conf to send stuff to the Indexer<BR /> 2: Configure <CODE>Settings</CODE> -&gt; <CODE>Distributed Search</CODE> -&gt; <CODE>Search Peers</CODE> -&gt; <CODE>Add</CODE> to be able to search data on the Indexer.</P> Sun, 15 Jul 2018 14:38:14 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417381#M20635 woodcock 2018-07-15T14:38:14Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417382#M20636 <P>Hi Wookcock,<BR /> thanks for Search Head commands ,what about the indexer setup?<BR /> Regards<BR /> smdasim</P> Sun, 15 Jul 2018 22:33:26 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417382#M20636 smdasim 2018-07-15T22:33:26Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417383#M20637 <P>Everything is an Indexer by default. It should be listening on port 9997 out of the box.</P> Sun, 15 Jul 2018 23:01:04 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417383#M20637 woodcock 2018-07-15T23:01:04Z https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417384#M20638 <P>Woodcock,<BR /> thank you !!<BR /> Much appreciated for your inputs !!!</P> Mon, 16 Jul 2018 00:36:47 GMT https://community.splunk.com/t5/Deployment-Architecture/how-to-deploy-search-head-and-indexer/m-p/417384#M20638 smdasim 2018-07-16T00:36:47Z