Deployment Architecture

Indexer VM corrupt

riqbal47010
Path Finder

we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to disk space issue. now we mount the new point and install the splunk package on that server . Now how can we join him back to the Indexer cluster.

Hostname and IP address is same.

Tags (1)
0 Karma

chinmoya
Communicator

Hi Riqbal,
Please follow the below steps

On the new indexer, log into the splunk UI
Go to: Settings->Indexer Clustering
Click "Add cluster to be searched"

Provide the clustermaster details and the security key. Your new indexer should now be a part of your cluster.

0 Karma

riqbal47010
Path Finder

Hi,

after installing the package I copied the server.conf file from other indexer and just update the name.

after that i replace the splunk.secret key.

and we are back in business.

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...