Deployment Architecture
Highlighted

Do I need to point a new search head to the master node or search peers of an indexer cluster?

Path Finder

Hello,

I have an indexer cluster setup. I don't want to configure a search head node in a cluster. I want to start a new Splunk Enterprise instance that I want to enable as a search head and search across the clustered indexers
1) is this possible?
2) if yes, can I see it in the master node dashboard?

Thanks,
SK

0 Karma
Highlighted

Re: Do I need to point a new search head to the master node or search peers of an indexer cluster?

Builder
0 Karma
Highlighted

Re: Do I need to point a new search head to the master node or search peers of an indexer cluster?

Splunk Employee
Splunk Employee

It's a bit unclear from your question exactly what you want to do. I think that you're asking whether you can search the indexer cluster from a search head that's not part of a search head cluster. If that's your question, then, the answer is "yes, that's a standard configuration."

You do need to designate the search head as a node in the indexer cluster, however. See: http://docs.splunk.com/Documentation/Splunk/6.4.1/Indexer/Enablethesearchhead

View solution in original post

Highlighted

Re: Do I need to point a new search head to the master node or search peers of an indexer cluster?

Path Finder

Thanks for your answer
and sorry , my question was unclear.

0 Karma