Do I need to point a new search head to the master node or search peers of an indexer cluster?

[saifuddin9122]

Hello,

I have an indexer cluster setup. I don't want to configure a search head node in a cluster. I want to start a new Splunk Enterprise instance that I want to enable as a search head and search across the clustered indexers
1) is this possible?
2) if yes, can I see it in the master node dashboard?

Thanks,
SK

[Steve_G_ · Accepted solution]

It's a bit unclear from your question exactly what you want to do. I think that you're asking whether you can search the indexer cluster from a search head that's not part of a search head cluster. If that's your question, then, the answer is "yes, that's a standard configuration."

You do need to designate the search head as a node in the indexer cluster, however. See: http://docs.splunk.com/Documentation/Splunk/6.4.1/Indexer/Enablethesearchhead

[saifuddin9122]

Thanks for your answer
and sorry , my question was unclear.

[prakash007]

You can find the config details in this docs...

http://docs.splunk.com/Documentation/Splunk/6.4.1/DistSearch/SHCandindexercluster