Hello I need a small clarification over distsearch.conf.
As per the documentation, to connect the SH with Indexer. One can configure in SH using any of the 3 ways : CLI, GUI & Conf file. The doc nicely describes it, Thanks for that.
In my case, the splunk env was already setup in my organisation. Now I am not aware which way was followed for adding search peer to search head.
Now in the SH GUI the "settings-->Distributed search-->Search peers" server entry is visible, and also the SH fetches the data from Indexer nicely. But my problem is I am not able to find out in which conf file that server settings are stored.
I tried to locate the distsearch.conf inside whole of splunk dir, but I could not find the server settings in anywhere. Further I tried to debug with btool cmd in SH and was surprised to see, even in that the servers settings are not visible.
Summarizing the Problem : The setting is visible in GUI, but no clue in which conf file that setting is getting stored.