https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100168#M20938 <P>Thanks so much!</P> Thu, 18 Apr 2013 18:31:52 GMT Strype 2013-04-18T18:31:52Z https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100166#M20936 <P>Although I personally wouldn't want to set it up this way...</P> <P>Is it possible to have one indexer that works for 2 separate search heads with 2 separate knowledge bundles? Wouldn't that cause a problem?</P> Thu, 18 Apr 2013 17:50:46 GMT https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100166#M20936 Strype 2013-04-18T17:50:46Z https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100167#M20937 <P>It is possible! However, any extractions that you want from one to the other need manually transferred. The data would be indexed in exactly the same way, but any Apps or search time modifications would be different.</P> Thu, 18 Apr 2013 18:05:18 GMT https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100167#M20937 alacercogitatus 2013-04-18T18:05:18Z https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100168#M20938 <P>Thanks so much!</P> Thu, 18 Apr 2013 18:31:52 GMT https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100168#M20938 Strype 2013-04-18T18:31:52Z https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100169#M20939 <P>If you want both search head to use the common set of knowledge bundle, you need to configure Search head pooling.</P> Fri, 19 Apr 2013 09:23:42 GMT https://community.splunk.com/t5/Getting-Data-In/Single-Indexer-with-2-different-Search-Heads/m-p/100169#M20939 daniel_splunk 2013-04-19T09:23:42Z