Deployment Architecture

Do I need to configure distributed search on all the search peers?

Legend

Do I need to configure distributed search on all the search peers?

Tags (1)
2 Solutions

Splunk Employee
Splunk Employee

On your search head, you can add each search peer within manager, while providing credentials to log into each peer. This is all you need for the search head to successfully search on the peers (search nodes).

There are other things you may want to do surrounding getting the data fanned out across the indexing & search nodes, but that should be it for distributed search setup itself.

View solution in original post

0 Karma

Champion

No, a search peer does not have to be configured to use distributed search. It must, however, be distributed search-enabled so that other peers can add it.

View solution in original post

0 Karma

Champion

No, a search peer does not have to be configured to use distributed search. It must, however, be distributed search-enabled so that other peers can add it.

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

On your search head, you can add each search peer within manager, while providing credentials to log into each peer. This is all you need for the search head to successfully search on the peers (search nodes).

There are other things you may want to do surrounding getting the data fanned out across the indexing & search nodes, but that should be it for distributed search setup itself.

View solution in original post

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!