https://community.splunk.com/t5/Getting-Data-In/How-to-set-up-an-environment-with-an-indexer-on-one-machine-and/m-p/220071#M43230 <P>Dears,</P> <P>May I know please if it's possible to have a setup in which I will have only two machines: one of them will act as Indexer and the other to act as Search Head, and if it's possible, how can I achieve that?</P> <P>thanks in advance </P> Fri, 26 Feb 2016 16:43:36 GMT ahmedhassanean 2016-02-26T16:43:36Z https://community.splunk.com/t5/Getting-Data-In/How-to-set-up-an-environment-with-an-indexer-on-one-machine-and/m-p/220071#M43230 <P>Dears,</P> <P>May I know please if it's possible to have a setup in which I will have only two machines: one of them will act as Indexer and the other to act as Search Head, and if it's possible, how can I achieve that?</P> <P>thanks in advance </P> Fri, 26 Feb 2016 16:43:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-up-an-environment-with-an-indexer-on-one-machine-and/m-p/220071#M43230 ahmedhassanean 2016-02-26T16:43:36Z https://community.splunk.com/t5/Getting-Data-In/How-to-set-up-an-environment-with-an-indexer-on-one-machine-and/m-p/220072#M43231 <P>Yes, it is definitely possible and I've done it. Install Splunk on both machines. Make your search head a license master and the indexer a license slave. On the search head, go to Settings-&gt;Distributed Search-&gt;Search Peers and click the New button to add your indexer as a peer. Configure your inputs on the indexer. If you run universal forwarders, have them send data to the indexer.</P> <P>See <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/DistSearch/Overviewofconfiguration">http://docs.splunk.com/Documentation/Splunk/6.3.3/DistSearch/Overviewofconfiguration</A> for more information.</P> Fri, 26 Feb 2016 17:26:42 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-up-an-environment-with-an-indexer-on-one-machine-and/m-p/220072#M43231 richgalloway 2016-02-26T17:26:42Z