Hello , we are planning to add a new search head to our existing search head cluster.
What are the steps I need to follow to properly to add a new member to our existing search head cluster?
We are pushing configs through deployer, so what is a command that I can use to update the new member with existing deployer and other search head settings?
You need to initialize and then Add this instance to the cluster. This can be done by running the following commands on your new instance
To initialize, run the below command and restart-
splunk init shcluster-config -auth <username>:<password> -mgmt_uri <URI>:<management_port> -replication_port <replication_port> -replication_factor <n> -conf_deploy_fetch_url <URL>:<management_port> -secret <security_key> -shcluster_label <label> splunk restart
To Add instance to Cluster, run this command -
splunk add shcluster-member -current_member_uri <URI>:<management_port>
Let me know if this helps
You do not require to resync, when you add new SH to SHC it will automatically get configuration bundle from Deployer and then it will contact Captain & download replicated config tarball.