Deployment Architecture

If u have separate instance in prod and training how you will combine the search results from both?

abhi04
Path Finder

If u have separate instance in prod and training how you will combine the search results from both?

Tags (1)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

A search head can search any number of search peers, giving you combined results.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

A search head can search any number of search peers, giving you combined results.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

If there's no connection between the environments then there's no combining of results.

Create a search head that uses both as search peers to get combined results.

0 Karma

abhi04
Path Finder

Hi Martin,
The prod have different search peers than the training and different search head as well.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!