Switch Cluster Master to new machine

[pkumar9610]

HI Friends,

I have ClusterMaster, SH, Indexers, License Master clustered. I want to move cluster master from one VM to another VM, I am aware of all the configuration need to be modified but how do I un-initialize ClusterMaster from SearchHead and Indexers so that I can initialize it again using below command to point to new ClusterMaster ?

Search Head:
/app/splunk/bin/splunk init shcluster-config -auth admin:xxxxx -mgmt_uri https://SearchHead.qasplunk.SPLUNK.qa.walmart.com:8089 -replication_port 8001 - replication_factor 1 -conf_deploy_fetch_url https://ClusterMaster1.qasplunk.SPLUNK.qa.walmart.com:8089 -secret xxxxx

Indexers:
/app/splunk/bin/splunk edit cluster-config -mode slave -master_uri https://ClusterMaster1.qasplunk.SPLUNK.qa.walmart.com:8089 -replication_port 8100 -secret xxxxx

[esix_splunk · Accepted solution]

If you're planning to point these to a new CM, its easier just to edit the server.conf file and manually change the URI for the cluster master, enter the new password, and restart the Splunk instance.

Thats all you have to do.

You might also consider sanitizing your hostnames in this post..

[pkumar9610]

Thank you for the quick response. So we don't have to do anything the above commands ? If I am changes to server.conf in Indexers & Search Heads and restart that will point to new cluster master ?