https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270273#M51886 <P>I'm not sure how that would appear in server.conf. <A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch</A> doesn't mention how standalone servers are taken into consideration.</P> Wed, 30 Mar 2016 13:50:47 GMT 606866581 2016-03-30T13:50:47Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270267#M51880 <P>Hi,<BR /> I've been reading related questions on this topic but I fear they're outdated as of 6.3. </P> <P>Can I configure a search head to search across, say, 2 clusters and 2 standalone indexers?<BR /> I'm struggling to find documentation that confirms or disproves this possibility.</P> <P>Thank you</P> <P>EDIT : I should point out that we plan to use the 2 standalone indexers to manage the 2 clusters.</P> Wed, 30 Mar 2016 13:18:53 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270267#M51880 606866581 2016-03-30T13:18:53Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270268#M51881 <P>In the clusters how many servers do you have?</P> Wed, 30 Mar 2016 13:24:20 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270268#M51881 jmallorquin 2016-03-30T13:24:20Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270269#M51882 <P>4, and each cluster will be managed by the 2 standalone indexers. This adds another level of complexity unfortunately</P> Wed, 30 Mar 2016 13:26:44 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270269#M51882 606866581 2016-03-30T13:26:44Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270270#M51883 <P>And the replication factor?</P> Wed, 30 Mar 2016 13:28:23 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270270#M51883 jmallorquin 2016-03-30T13:28:23Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270271#M51884 <P>2, search factor 2. But would this make a difference?</P> Wed, 30 Mar 2016 13:29:33 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270271#M51884 606866581 2016-03-30T13:29:33Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270272#M51885 <P>Yes,</P> <P>Just configure in the search peers in case of cluster one indexer of the cluster (to not duplicate events) and the standalone servers.</P> <P>Hope i help you</P> Wed, 30 Mar 2016 13:41:48 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270272#M51885 jmallorquin 2016-03-30T13:41:48Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270273#M51886 <P>I'm not sure how that would appear in server.conf. <A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch</A> doesn't mention how standalone servers are taken into consideration.</P> Wed, 30 Mar 2016 13:50:47 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270273#M51886 606866581 2016-03-30T13:50:47Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270274#M51887 <P>The searching across multiple indexer clusters is configured by method described here<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch#By_editing_server.conf_2">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremulti-clustersearch#By_editing_server.conf_2</A></P> <P>Below link should give you how to then add the non-clustered/standalone Indexers.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configureclusteredandnonclusteredsearch">http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configureclusteredandnonclusteredsearch</A></P> Wed, 30 Mar 2016 14:06:32 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270274#M51887 somesoni2 2016-03-30T14:06:32Z https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270275#M51888 <P>I can't believe I missed it, It was right there! Thanks for your time</P> Wed, 30 Mar 2016 14:12:42 GMT https://community.splunk.com/t5/Getting-Data-In/Searching-across-clustered-and-standalone-indexers/m-p/270275#M51888 606866581 2016-03-30T14:12:42Z