topic Re: Indexer VM corrupt in Deployment Architecture

Indexer VM corrupt

riqbal47010 — Wed, 11 Sep 2019 07:35:08 GMT

we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to disk space issue. now we mount the new point and install the splunk package on that server . Now how can we join him back to the Indexer cluster.

Hostname and IP address is same.

Re: Indexer VM corrupt

chinmoya — Wed, 11 Sep 2019 10:46:13 GMT

Hi Riqbal,
Please follow the below steps

On the new indexer, log into the splunk UI
Go to: Settings->Indexer Clustering
Click "Add cluster to be searched"

Provide the clustermaster details and the security key. Your new indexer should now be a part of your cluster.

Re: Indexer VM corrupt

riqbal47010 — Wed, 11 Sep 2019 11:45:24 GMT

Hi,

after installing the package I copied the server.conf file from other indexer and just update the name.

after that i replace the splunk.secret key.

and we are back in business.