Deployment Architecture

How to set up search head in Distributed Management Console of master node ?

sunrise
Contributor

Hi Splunkers,

Distributed Management Console(DMC) is the new feature of Splunk V6.2.
http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/ConfiguretheMonitoringConsole

I configured the splunk clustering system - 1 search head, 3 peers, 1 master node - .
And I configured outputs.conf in search head as follows.

[indexAndForward]
index = false

[tcpout]
defaultGroup = my_search_peers
forwardedindex.filter.disable = true
indexAndForward = false

[tcpout:my_search_peers]
server=peer1.cluster.splunk.com:9997,peer2.cluster.splunk.com:9997,peer3.cluster.splunk.com:9997
useACK = true

And after setting peers as receivers, I confirmed peers received the search head internal log.
I selected the master node as DMC, but the search head is not appeared in "Setup".
How to list search head node in DMC of the master node ?

Thank you for your help.

1 Solution

martin_mueller
SplunkTrust
SplunkTrust

As documented in the page you linked to - specifically http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/ConfiguretheMonitoringConsole#Add_instances_... - you need to add the search heads as search peers to the master node.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

As documented in the page you linked to - specifically http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/ConfiguretheMonitoringConsole#Add_instances_... - you need to add the search heads as search peers to the master node.

sunrise
Contributor

Thank you martin_mueller as always. I've compeletely overlooked.

0 Karma
Get Updates on the Splunk Community!

Holistic Visibility and Effective Alerting Across IT and OT Assets

Instead of effective and unified solutions, they’re left with tool fatigue, disjointed alerts and siloed ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...