Hi I have created a splunk cluster with the following configuration:
1 * Master (also the licensing master) - indexing turned off
3 * Inders peers
1 * Standalone search head - index turned off
I have created a basic configuration bundle - a folder for myapp1 under in master-apps on the master node:
I validated the bundle and on success applied to cluster. This created the index and app on the indexers. I have uploaded some data into the index. It is all green on the cluster dashboard but I cannot see the indexes on the searchhead. What should be done to view the indexes on the searchead. I am new to Splunk, have been asked to provision a splunk cluster... Please help.