Deployment Architecture

How to return old version of distsearch.conf file?


Hello. I added a new peer through the Search peers settings But I realized that I do not need this server. I try to delete via the web, it doesn’t work, I delete it by editing the file, it also doesn’t work, restarting the distsearch.conf file returns where this server is. How to remove this server, I've been trying to find a solution for a month now I am editing distsearch.conf file I delete the contents of servers, [distributed search] disabled = 0 servers =,,, Restarting splunk everything returns. I'm trying to delete via web. also does not apply. have access to the network. everything works correctly. But **beep** it I can't remove it from the file HOW DO I RETURN THE OLD VERSION OF THE FILE distsearch.conf

0 Karma
Get Updates on the Splunk Community!

There's No Place Like Chrome and the Splunk Platform

Watch On DemandMalware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out >> 🏆 Check out the ...

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...