topic Re: How to I add an indexer to the MC? in Monitoring Splunk

How to I add an indexer to the MC?

ddrillic — Wed, 11 Oct 2017 15:37:22 GMT

We added recently indexers and all of them show up as being members of the indexer cluster. How do I add them to the MC?

sbbadri — Wed, 11 Oct 2017 15:53:29 GMT

@ddrillic

Settings -> Management Console -> settings -> General Setup

Under that select mode as distributed. Then Confiugre indexers.

ddrillic — Wed, 11 Oct 2017 15:58:09 GMT

Right.

-- Settings -> Management Console -> settings -> General Setup
Under that select mode as distributed. Then Confiugre indexers.

I don't see an add button here...

sbbadri — Wed, 11 Oct 2017 16:15:49 GMT

execute below steps first and MC to setup labels,

ddrillic — Wed, 11 Oct 2017 16:36:08 GMT

Perfect. But on step #4, I get this error -

Encountered the following error while trying to save: Status 401 while sending public key to search peer https://<new host>:8089: Unauthorized

harsmarvania57 — Wed, 11 Oct 2017 16:56:49 GMT

As far as I know you don’t need to add indexers in MC when you are running indexer cluster.

When you point MC to Cluster Master MC will automatically populate list of indexers in MC setup page.

Thanks,
Harshil

ddrillic — Wed, 11 Oct 2017 17:00:34 GMT

That's what I thought but we did end up in the past year or so adding them one by one...

-- When you point MC to Cluster Master MC....
How do I do that?

harsmarvania57 — Wed, 11 Oct 2017 17:12:37 GMT

If you want to reconfigure MC then (Before you perform below steps you might need to setup label on IDX cluster)

1.) Remove all indexers which you added manually.

2.) Point MC to CM, (same process when you point stand-alone SH to CM.)

3.) Restart Splunk on MC

4.) Goto MC setup page, here you will see all Indexers populated automatically.

I think I am not missing any point 😛

Thanks,
Harshil

ddrillic — Wed, 11 Oct 2017 18:29:49 GMT

Very interesting - let me try it...