<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Search Head Polling with mounted Bundles in Knowledge Management</title>
    <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124138#M1268</link>
    <description>&lt;P&gt;If you only have 1 search head, why are you using pooling? Pooling is for 2 or more search heads. &lt;/P&gt;

&lt;P&gt;With that said, Bundles can be configured on a per search-head basis. Meaning, Each indexer has a file which says which search heads send bundles, and which search heads need to use mounted bundles. Each SearchHead is configured to either send bundles, or use mounted bundles. So You can't have one search peer use replicated and one use mounted with a single searchhead.&lt;/P&gt;

&lt;P&gt;Make sense? or did I just confuse you?&lt;/P&gt;</description>
    <pubDate>Tue, 08 Apr 2014 13:25:09 GMT</pubDate>
    <dc:creator>alacercogitatus</dc:creator>
    <dc:date>2014-04-08T13:25:09Z</dc:date>
    <item>
      <title>Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124137#M1267</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;In our platform we are using search head pooling with mounted bundles.&lt;BR /&gt;
If I have one search head and two indexer(search peers) and i would like to share bundles configuration to one search peer alone.&lt;BR /&gt;
How can I achieve this?&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 12:33:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124137#M1267</guid>
      <dc:creator>premg</dc:creator>
      <dc:date>2014-04-08T12:33:01Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124138#M1268</link>
      <description>&lt;P&gt;If you only have 1 search head, why are you using pooling? Pooling is for 2 or more search heads. &lt;/P&gt;

&lt;P&gt;With that said, Bundles can be configured on a per search-head basis. Meaning, Each indexer has a file which says which search heads send bundles, and which search heads need to use mounted bundles. Each SearchHead is configured to either send bundles, or use mounted bundles. So You can't have one search peer use replicated and one use mounted with a single searchhead.&lt;/P&gt;

&lt;P&gt;Make sense? or did I just confuse you?&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 13:25:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124138#M1268</guid>
      <dc:creator>alacercogitatus</dc:creator>
      <dc:date>2014-04-08T13:25:09Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124139#M1269</link>
      <description>&lt;P&gt;okies.. With two search heads is it possible to achieve the same.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 13:30:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124139#M1269</guid>
      <dc:creator>premg</dc:creator>
      <dc:date>2014-04-08T13:30:37Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124140#M1270</link>
      <description>&lt;P&gt;It is possible - just not recommended - Especially when you are in a Search Head Pool.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 13:36:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124140#M1270</guid>
      <dc:creator>alacercogitatus</dc:creator>
      <dc:date>2014-04-08T13:36:17Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124141#M1271</link>
      <description>&lt;P&gt;If this answers your question, please mark it accepted. Thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 13:53:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124141#M1271</guid>
      <dc:creator>alacercogitatus</dc:creator>
      <dc:date>2014-04-08T13:53:48Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124142#M1272</link>
      <description>&lt;P&gt;We have two search heads and two search peers + 1 master.&lt;BR /&gt;
We have indexer clustering, searchhead pooling and NAS mounted bundles in place.&lt;BR /&gt;
Everything works fine. &lt;/P&gt;

&lt;P&gt;However, for seperate requirement, I have to introduce new indexer with no NAS.&lt;BR /&gt;
And I have reuse existing search heads.&lt;/P&gt;

&lt;P&gt;Now, I want existing searchheads not to share bundle to existing indexers and share bundles to new stand-alone indexer.&lt;BR /&gt;
How do I achieve that?&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 14:24:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124142#M1272</guid>
      <dc:creator>premg</dc:creator>
      <dc:date>2014-04-08T14:24:50Z</dc:date>
    </item>
    <item>
      <title>Re: Search Head Polling with mounted Bundles</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124143#M1273</link>
      <description>&lt;P&gt;You don't.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2014 19:31:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Search-Head-Polling-with-mounted-Bundles/m-p/124143#M1273</guid>
      <dc:creator>alacercogitatus</dc:creator>
      <dc:date>2014-04-08T19:31:15Z</dc:date>
    </item>
  </channel>
</rss>

