Deployment Architecture

How to return old version of distsearch.conf file?

gitingua
Communicator

Hello. I added a new peer through the Search peers settings But I realized that I do not need this server. I try to delete via the web, it doesn’t work, I delete it by editing the file, it also doesn’t work, restarting the distsearch.conf file returns where this server is. How to remove this server, I've been trying to find a solution for a month now I am editing distsearch.conf file I delete the contents of servers 1.1.1.3, 1.1.1.4 [distributed search] disabled = 0 servers = https://1.1.1.1:8089,https://1.1.1.2:8089,https://1.1.1.3:8089,https://1.1.1.4:8089 Restarting splunk everything returns. I'm trying to delete via web. also does not apply. have access to the network. everything works correctly. But **beep** it I can't remove it from the file HOW DO I RETURN THE OLD VERSION OF THE FILE distsearch.conf

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...