https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210559#M41482 <P>In this context, you can just turn offline that instance and destroy it. The master will handle the bucket fixing activities to make sure the copies of the data exist elsewhere. Make sure all the indexes have at least a replication factor of 2 otherwise you will lose data that only exists on that host.</P> <P>This page covers that topic:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_peer_node_gets_taken_offline_intentionally">http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_peer_node_gets_taken_offline_intentionally</A></P> <P>Notice that in this context, you should run <CODE>./splunk offline</CODE> rather than <CODE>./splunk stop</CODE>.</P> Mon, 02 Nov 2015 13:35:29 GMT sloshburch 2015-11-02T13:35:29Z https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210558#M41481 <P>Hi,</P> <P>I want to remove some legacy indexers from my cluster. I did the <CODE>./splunk offline --enforce-counts</CODE> command, and now I tried the remove cluster command:</P> <PRE><CODE>./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C </CODE></PRE> <P>Splunk comes back with:</P> <PRE><CODE>Command error: 'cluster-peers' is not a valid argument for the 'remove' command. Please type "splunk help remove" for usage and examples. </CODE></PRE> <P>Is 6.1 different somehow? </P> Sat, 31 Oct 2015 15:28:08 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210558#M41481 a212830 2015-10-31T15:28:08Z https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210559#M41482 <P>In this context, you can just turn offline that instance and destroy it. The master will handle the bucket fixing activities to make sure the copies of the data exist elsewhere. Make sure all the indexes have at least a replication factor of 2 otherwise you will lose data that only exists on that host.</P> <P>This page covers that topic:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_peer_node_gets_taken_offline_intentionally">http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_peer_node_gets_taken_offline_intentionally</A></P> <P>Notice that in this context, you should run <CODE>./splunk offline</CODE> rather than <CODE>./splunk stop</CODE>.</P> Mon, 02 Nov 2015 13:35:29 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210559#M41482 sloshburch 2015-11-02T13:35:29Z https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210560#M41483 <PRE><CODE> ./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C </CODE></PRE> <P>Did you perform the command from the cluster master ?? </P> Tue, 20 Nov 2018 20:28:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-remove-an-indexer-peer-from-an-indexer-cluster-in-Splunk/m-p/210560#M41483 nawazns5038 2018-11-20T20:28:56Z