https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260429#M49994 <P>Anyone have any experience in this? I'm insure of how to set it up as DMC gives me that warning </P> <P>I imagine there probably a way to do it all through command line if DMC doesn't support . Any direction or walk through / how to's to on how to make this happen is appreciated. </P> Sat, 16 Jul 2016 03:13:37 GMT Jarohnimo 2016-07-16T03:13:37Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260427#M49992 <P>Is it possible to set up Splunk with Just 1 Indexer, and 1 Search head? I began to attempt this through the Distributed Management Console, but received a nasty warning about not setting up DMC on a box that would be a SH as it would not be supported by Splunk. Is DMC not the way to go for this?</P> <P>Is it possible to have a setup with only 2 servers (1 sh, 1 indexer)? If so, can someone please provide clear instruction on how to do so as this wasn't clear in the Splunk documentation I've read.</P> <P>Respectfully,</P> Thu, 14 Jul 2016 22:12:55 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260427#M49992 Jarohnimo 2016-07-14T22:12:55Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260428#M49993 <P>The <A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/Deploy/Searchheadwithindexers">Small enterprise deployment: Single search head with multiple indexers</A> describes a close enough scenario.</P> <P>It shows -</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1585iCC17254BE874A059/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>In one of the original courses, they show a transition from one Splunk server to the original one as the Indexer and a new one as a SH. So, what you are trying to do is legitimate ; -)</P> Fri, 15 Jul 2016 00:32:36 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260428#M49993 ddrillic 2016-07-15T00:32:36Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260429#M49994 <P>Anyone have any experience in this? I'm insure of how to set it up as DMC gives me that warning </P> <P>I imagine there probably a way to do it all through command line if DMC doesn't support . Any direction or walk through / how to's to on how to make this happen is appreciated. </P> Sat, 16 Jul 2016 03:13:37 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260429#M49994 Jarohnimo 2016-07-16T03:13:37Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260430#M49995 <P>Works just fine, just make sure you have the spare capacity to run a few scheduled things from the DMC.</P> Sat, 16 Jul 2016 08:31:21 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260430#M49995 martin_mueller 2016-07-16T08:31:21Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260431#M49996 <P>Can some one provide a how to guide link? I'm unable to find actual instructions on how to set this up. I find lots of articles that tal about the concept and the technology but nothing as granular as.<BR /> Cd to bin and type splunk add indexer ..... &lt;--- does something like this exist ? If so is it possible to setup via DMC?</P> Sat, 16 Jul 2016 22:51:11 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260431#M49996 Jarohnimo 2016-07-16T22:51:11Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260432#M49997 <P>Here's all you need to know about adding a search peer (indexer) to a search head: <A href="http://docs.splunk.com/Documentation/Splunk/6.4.2/DistSearch/Configuredistributedsearch">http://docs.splunk.com/Documentation/Splunk/6.4.2/DistSearch/Configuredistributedsearch</A></P> Sat, 16 Jul 2016 22:57:31 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260432#M49997 martin_mueller 2016-07-16T22:57:31Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260433#M49998 <P>Thank you, I'd like to vote yours as the correct answer but i'm unsure how to do so. It's only allowing me to accept the first person's response as the answer.. smh </P> Sat, 16 Jul 2016 23:05:09 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260433#M49998 Jarohnimo 2016-07-16T23:05:09Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260434#M49999 <P>I have converted the comment, so if this answers your question you can accept it as such.</P> Mon, 25 Jul 2016 20:49:27 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260434#M49999 martin_mueller 2016-07-25T20:49:27Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260435#M50000 <P>I downvoted this post because not the best answer</P> Tue, 26 Jul 2016 01:09:42 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-set-up-a-Splunk-deployment-with-just-1-indexer/m-p/260435#M50000 Jarohnimo 2016-07-26T01:09:42Z