<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Single Search Head/Single Indexer (distributed search) in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Single-Search-Head-Single-Indexer-distributed-search/m-p/490560#M83857</link>
    <description>&lt;P&gt;Hi and welcome,&lt;/P&gt;

&lt;P&gt;when you are downloading, installing and starting Splunk, you would have a single-instance (often called "all in one" instance). Please refer &lt;A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Deploy/Singleindexer"&gt;to the docs&lt;/A&gt; for an explanation of this.&lt;BR /&gt;
Splunk scales from a single server to multiple ones, both Search Heads and indexers. This is referred to as a distributed deployment and described &lt;A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Deploy/Deploymentcharacteristics"&gt;here in the docs&lt;/A&gt;.&lt;/P&gt;

&lt;P&gt;Please use Google to search through Splunk Docs or Answers as they're visible to anyone and this question has been asked quite a few times. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Skalli&lt;/P&gt;</description>
    <pubDate>Wed, 27 Nov 2019 12:49:54 GMT</pubDate>
    <dc:creator>skalliger</dc:creator>
    <dc:date>2019-11-27T12:49:54Z</dc:date>
    <item>
      <title>Single Search Head/Single Indexer (distributed search)</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Single-Search-Head-Single-Indexer-distributed-search/m-p/490559#M83856</link>
      <description>&lt;P&gt;Hi, &lt;/P&gt;

&lt;P&gt;Is it possible to create a single search head instance ? &lt;BR /&gt;
And or a single indexer instane? - Or are the instances by default indexers? &lt;/P&gt;</description>
      <pubDate>Wed, 27 Nov 2019 10:34:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Single-Search-Head-Single-Indexer-distributed-search/m-p/490559#M83856</guid>
      <dc:creator>splunk_user_99</dc:creator>
      <dc:date>2019-11-27T10:34:11Z</dc:date>
    </item>
    <item>
      <title>Re: Single Search Head/Single Indexer (distributed search)</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Single-Search-Head-Single-Indexer-distributed-search/m-p/490560#M83857</link>
      <description>&lt;P&gt;Hi and welcome,&lt;/P&gt;

&lt;P&gt;when you are downloading, installing and starting Splunk, you would have a single-instance (often called "all in one" instance). Please refer &lt;A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Deploy/Singleindexer"&gt;to the docs&lt;/A&gt; for an explanation of this.&lt;BR /&gt;
Splunk scales from a single server to multiple ones, both Search Heads and indexers. This is referred to as a distributed deployment and described &lt;A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Deploy/Deploymentcharacteristics"&gt;here in the docs&lt;/A&gt;.&lt;/P&gt;

&lt;P&gt;Please use Google to search through Splunk Docs or Answers as they're visible to anyone and this question has been asked quite a few times. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Skalli&lt;/P&gt;</description>
      <pubDate>Wed, 27 Nov 2019 12:49:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Single-Search-Head-Single-Indexer-distributed-search/m-p/490560#M83857</guid>
      <dc:creator>skalliger</dc:creator>
      <dc:date>2019-11-27T12:49:54Z</dc:date>
    </item>
  </channel>
</rss>

