Deployment Architecture

How do I remove a search head from an Indexer Cluster?

lguinn2
Legend

I have been building an indexer cluster. As part of my testing, I created several search heads and added them to the cluster.
Then I killed some of the search heads.

The search heads still appear on the Cluster Master's dashboard under the "Search Heads" tab. Of course, the search heads I want to remove are listed as "Down"

How do I get rid of these?

1 Solution

esix_splunk
Splunk Employee
Splunk Employee

This is correct. Once you restart the Cluster Master node, the removed SH / IDX Peers will be removed from the display.

View solution in original post

esix_splunk
Splunk Employee
Splunk Employee

This is correct. Once you restart the Cluster Master node, the removed SH / IDX Peers will be removed from the display.

hemendralodhi
Contributor

Hi, I have seen this in the past with our deployment and even after bringing down SH they appear in CM. I restarted CM and all SH which were marked down got removed from the list.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...