we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to disk space issue. now we mount the new point and install the splunk package on that server . Now how can we join him back to the Indexer cluster.
Hostname and IP address is same.
Hi Riqbal,
Please follow the below steps
On the new indexer, log into the splunk UI
Go to: Settings->Indexer Clustering
Click "Add cluster to be searched"
Provide the clustermaster details and the security key. Your new indexer should now be a part of your cluster.
Hi,
after installing the package I copied the server.conf file from other indexer and just update the name.
after that i replace the splunk.secret key.
and we are back in business.