I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.
https://docs.splunk.com/Documentation/Splunk/8.2.1/Knowledge/Sharedatamodelsummaries
The article states: "You can find the GUID for a search head cluster in the [shclustering] stanza of server.conf. If you are running a single instance you can find the GUID in etc/instance.cfg. "
But in my case the only guids I can find are those on single shcluster members in etc/instance.cfg. Of course each one is different. I cannot seem to find a "search head cluster GUID" anywhere.
What am I doing wrong?
Hi,
In Search Head Cluster, you can find GUID in $SPLUNK_HOME/etc/system/local/server.conf under [shclustering] stanza and parameter name is id
id = <GUID>
* Unique identifier for this cluster as a whole, shared across all cluster
members.
* Default: Splunk software arranges for a unique value to be generated and
shared across all members.
Hi,
In Search Head Cluster, you can find GUID in $SPLUNK_HOME/etc/system/local/server.conf under [shclustering] stanza and parameter name is id
id = <GUID>
* Unique identifier for this cluster as a whole, shared across all cluster
members.
* Default: Splunk software arranges for a unique value to be generated and
shared across all members.
Argh. I was looking for a guid parameter, not id. That's why I couldn't find it.
Thank you!