Is it possible to separate Search Header and Index?
ex) one system for only Search Head & another system for only Index
I did set up distributed search features (2 servers) and both have S.H and Index
If i want 1 Search Header & 1 Index on different server, then how can i figure this out?
yes you can install 1 Search Header & 1 Index on different server
and how..?
confused....
see my answer and following steps like http://docs.splunk.com/Documentation/Splunk/6.1.4/DistSearch/Installadedicatedsearchhead
Hi nanaruru12,
read the docs about Distributed Search http://docs.splunk.com/Documentation/Splunk/6.1.4/DistSearch/Overviewofconfiguration within there you can find all needed instructions.
cheers, MuS