hello Splunkers,
We have some tricky situations and here is the info:
1 set of Index cluster 1 master A Site A
1 set of index cluster 1 master B Site B
Note — Both are not identical. We just build based on our requirement, but part of the index cluster with different masters.
1 set of stand alone Indexer
My question is I have one set of search head clusters for all these sites since I have 2 masters nodes. So I'm confused how i can add to search head cluster configuration. Any advice will be great help.
i found a document in Splunk website ..
https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/Configuremulti-clustersearch
[clustering]
mode = searchhead
master_uri = clustermaster:east, clustermaster:west
[clustermaster:east]
master_uri=https://SplunkMaster01.example.com:8089
pass4SymmKey=someSecret
[clustermaster:west]
master_uri=https://SplunkMaster02.example.com:8089
pass4SymmKey=anotherSecret