Hi SPlunkers,
I have a multisite search head cluster TWO SH's
SH1 ( SITE1 ) and SH2 ( SITE2 )
AND
I have multisite indexer cluster - TWO IDX
IDX1 ( SITE1) and IDX2 ( SITE2)
So SH CLUSTER IS PAIRED WITH INDEXER CLUSTER VIA CLUSTER MASTER ---- This is the current setup
Now I have a standalone Indexer which I want to add to this SH CLUSTER
IS it possible?
IF YES, could you please guide me !!
Hi,
Have a look at https://docs.splunk.com/Documentation/Splunk/7.3.0/Indexer/Configureclusteredandnonclusteredsearch
Additionally it is not recommended to run SH Cluster with 2 members only, as per Splunk recommendation minimum 3 SH require in Search Head Cluster.