Deployment Architecture

How to add a search head, but not as a member of the cluster, in a multisite search head clustering environment?

smudge797
Path Finder

We have a multisite cluster which has search head clustering configured and all is working fine. I want to add a single search head to the cluster (not to the shcluster), but need to be site aware. Using local search peers on site1 and only using other sites 2 & 3 if site1 is not available.

0 Karma

gfreitas
Builder
0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...