Deployment Architecture

How to configure search head and indexers in a Unix environment?


Hi All,

I need to configure the one Splunk server as Search head and another 2 standalone machines as indexers in distributed environment.
Can some one guide me how I can do that.
I already installed the Splunk enterprise on my Unix machine and its up and running but I am not sure how I can make that to work as search head and point the other 2 machine as indexers machine to this search head.
Please help me.

0 Karma

Splunk Employee
Splunk Employee

This is a pretty broad topic but I would recommend reviewing the following document which will guide you with configuring a distributed environment:

Sr. Technical Support Engineer
Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...