Deployment Architecture

How to setup a search head for 3 indexers

nicolay_koecher
Explorer

Hello,

I´ve 3 indexer running, now I plann to setup one search head to query all 3, how can this be done. 2 Linux Indexer 1 Windows box.

thanks

Tags (1)
0 Karma

srinathd
Contributor

Hi,

In the search head system/local/distsearch file.. you can mention the indexer servers like below

[distributedSearch]
servers = lm-pr-idxr-01:8089,lm-pr-idxr-02:8089,lm-pr-idxr-03:8089,lm-pr-idxr-04:8089,lm-pr-idxr-05:8089,lm-pr-idxr-06:8089,lm-pr-dply-01:8089

Cheers, Srinath

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...