topic Re: Splunk indexers in Installation

How to integrate new indexers to an existing multisite indexer cluster?

athapliyal — Tue, 08 Aug 2023 16:35:11 GMT

Hey , So I need to integrate 12 new indexers to an existing multisite indexer cluster. Cant seem to find a documentation with this. Any pointer would be appreciated.

Re: Splunk indexers

inventsekar — Tue, 08 Aug 2023 03:48:44 GMT

>>> So I need to integrate 12 new indexers to an existing multisite indexer cluster.

i assume, you want to "add" 12 new indexer peers to the existing multisite indexer cluster.. Please check:

https://docs.splunk.com/Documentation/Splunk/9.1.0/Indexer/Addclusterpeer

if this resolves you query, can you pls accept it as solution.. thanks.

Re: Splunk indexers

isoutamo — Tue, 08 Aug 2023 06:56:25 GMT

if/when you have this size of multisite cluster, I suppose that you have (or at least you should) some kind of automation like ansible to manage that cluster? If not you could follow up @inventsekar 's link to just add a new search peers to both site. But as I said usually you have some tools to manage multisite (also normal) indexer clusters to ensure that all nodes are identical.

r. Ismo