Deployment Architecture

How to setup a search head for 3 indexers

nicolay_koecher
Explorer

Hello,

I´ve 3 indexer running, now I plann to setup one search head to query all 3, how can this be done. 2 Linux Indexer 1 Windows box.

thanks

Tags (1)
0 Karma

srinathd
Contributor

Hi,

In the search head system/local/distsearch file.. you can mention the indexer servers like below

[distributedSearch]
servers = lm-pr-idxr-01:8089,lm-pr-idxr-02:8089,lm-pr-idxr-03:8089,lm-pr-idxr-04:8089,lm-pr-idxr-05:8089,lm-pr-idxr-06:8089,lm-pr-dply-01:8089

Cheers, Srinath

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...