Indexer VM corrupt

Path Finder

we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to disk space issue. now we mount the new point and install the splunk package on that server . Now how can we join him back to the Indexer cluster.

Hostname and IP address is same.

Tags (1)
0 Karma

Path Finder

Hi Riqbal,
Please follow the below steps

On the new indexer, log into the splunk UI
Go to: Settings->Indexer Clustering
Click "Add cluster to be searched"

Provide the clustermaster details and the security key. Your new indexer should now be a part of your cluster.

0 Karma

Path Finder


after installing the package I copied the server.conf file from other indexer and just update the name.

after that i replace the splunk.secret key.

and we are back in business.

0 Karma