Deployment Architecture

How to configure search head and indexers in a Unix environment?


Hi All,

I need to configure the one Splunk server as Search head and another 2 standalone machines as indexers in distributed environment.
Can some one guide me how I can do that.
I already installed the Splunk enterprise on my Unix machine and its up and running but I am not sure how I can make that to work as search head and point the other 2 machine as indexers machine to this search head.
Please help me.

0 Karma

Splunk Employee
Splunk Employee

This is a pretty broad topic but I would recommend reviewing the following document which will guide you with configuring a distributed environment:

Sr. Technical Support Engineer
Get Updates on the Splunk Community!

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Admin Console: A Single, Unified Interface for All Your Cloud Admin Needs

WATCH NOWJoin us to learn how the admin console can save you time and give you more control over the Splunk® ...