Deployment Architecture

Indexer VM corrupt

riqbal47010
Path Finder

we have 6 indexers in indexer cluster setup. one of the indexer server, the splunk mount point goes corrupt due to disk space issue. now we mount the new point and install the splunk package on that server . Now how can we join him back to the Indexer cluster.

Hostname and IP address is same.

Tags (1)
0 Karma

chinmoya
Communicator

Hi Riqbal,
Please follow the below steps

On the new indexer, log into the splunk UI
Go to: Settings->Indexer Clustering
Click "Add cluster to be searched"

Provide the clustermaster details and the security key. Your new indexer should now be a part of your cluster.

0 Karma

riqbal47010
Path Finder

Hi,

after installing the package I copied the server.conf file from other indexer and just update the name.

after that i replace the splunk.secret key.

and we are back in business.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...