Search Head and 2 peers, how setup


hey guys, i need some help

i have 3 machines, and 2 of than is receiving data, and i want to user the third machine to search on the others, how i can proceed?

Tags (1)
0 Karma


You do exactly what your question suggests. You set up Splunk on the third, and through the management GUI you delegate its searches to the two indexing peers.

This is an Enterprise-only feature.


Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!