Archive

how to deploy search head and indexer

New Member

Hi
how to deploy search head and indexer with detailed steps
regards
smdasim

Tags (1)
0 Karma
1 Solution

Esteemed Legend

Create your server instances (2) and Install Linux.
Install Splunk Enterprise.
Create admin user.
On the one that is to be the Search Head:
1: Configure outputs.conf to send stuff to the Indexer
2: Configure Settings -> Distributed Search -> Search Peers -> Add to be able to search data on the Indexer.

View solution in original post

0 Karma

Esteemed Legend

Create your server instances (2) and Install Linux.
Install Splunk Enterprise.
Create admin user.
On the one that is to be the Search Head:
1: Configure outputs.conf to send stuff to the Indexer
2: Configure Settings -> Distributed Search -> Search Peers -> Add to be able to search data on the Indexer.

View solution in original post

0 Karma

New Member

Hi Wookcock,
thanks for Search Head commands ,what about the indexer setup?
Regards
smdasim

0 Karma

Esteemed Legend

Everything is an Indexer by default. It should be listening on port 9997 out of the box.

0 Karma

New Member

Woodcock,
thank you !!
Much appreciated for your inputs !!!

0 Karma

SplunkTrust
SplunkTrust

Hi @smdasim,

You can start from here : http://docs.splunk.com/Documentation/Splunk/7.1.1/Installation/Whatsinthismanual

Based on your environment and deployment model (distributed,cluste,etc) you shall follow the respective links.

Please lets know if you need any further assistance in any of the steps.

0 Karma

SplunkTrust
SplunkTrust

Hi @smdasim, lets know if still have questions

0 Karma

New Member

Hi renjith.nair,
Can you please give me links for basic setup required for architecture certification lab.
regards
smdasim

0 Karma