Deployment Architecture

GUID of a search-head cluster

PickleRick
SplunkTrust
SplunkTrust

I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.

https://docs.splunk.com/Documentation/Splunk/8.2.1/Knowledge/Sharedatamodelsummaries

The article states: "You can find the GUID for a search head cluster in the [shclustering] stanza of server.conf. If you are running a single instance you can find the GUID in etc/instance.cfg. "

 But in my case the only guids I can find are those on single shcluster members in etc/instance.cfg. Of course each one is different. I cannot seem to find a "search head cluster GUID" anywhere.

What am I doing wrong?

Labels (1)
0 Karma
1 Solution

harsmarvania57
Ultra Champion

Hi,

In Search Head Cluster, you can find GUID in $SPLUNK_HOME/etc/system/local/server.conf under [shclustering] stanza and parameter name is id

id = <GUID>
* Unique identifier for this cluster as a whole, shared across all cluster
  members.
* Default: Splunk software arranges for a unique value to be generated and
  shared across all members.

 

View solution in original post

harsmarvania57
Ultra Champion

Hi,

In Search Head Cluster, you can find GUID in $SPLUNK_HOME/etc/system/local/server.conf under [shclustering] stanza and parameter name is id

id = <GUID>
* Unique identifier for this cluster as a whole, shared across all cluster
  members.
* Default: Splunk software arranges for a unique value to be generated and
  shared across all members.

 

PickleRick
SplunkTrust
SplunkTrust

Argh. I was looking for a guid parameter, not id. That's why I couldn't find it.

Thank you!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...