Deployment Architecture

DMC: Search heads shown as heavy forwarders?

cdoebert
Path Finder

I'm in a setup with a license/deployment server, three clustered search heads and a deployer, and three non-clustered indexers.

Per the documentation on setting up the DMC, I'm setting it up on the deployer. It picked up the indexers, but I can't get it to pick up my search heads and I'm not sure why. When I turn on forwarder monitoring, my search heads show up as heavy forwarders.

How do I get the search heads to show up in the DMC?

Tags (1)
0 Karma
1 Solution

cdoebert
Path Finder

This is fixed in an extremely odd way. I had to edit the server roles for the license/deployment server (even though it picked them up automatically) so I could get the error for a deployment server to have another role and accept it, and then all the servers that weren't indexers graduated from "New" to "Configured".

View solution in original post

0 Karma

cdoebert
Path Finder

This is fixed in an extremely odd way. I had to edit the server roles for the license/deployment server (even though it picked them up automatically) so I could get the error for a deployment server to have another role and accept it, and then all the servers that weren't indexers graduated from "New" to "Configured".

0 Karma

renjith_nair
Legend

Add those as search peers.

Try this

http://docs.splunk.com/Documentation/Splunk/6.4.3/DMC/Addinstancesassearchpeers

---
What goes around comes around. If it helps, hit it with Karma 🙂

cdoebert
Path Finder

I followed that and added the entire environment, and everything shows up in the general setup tab, but I still see only the indexers in the overview and none of the other tabs (aside from indexing) work.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...