Deployment Architecture

Is it normal that each time I restart an indexer, I have to manually add it back in the search head Distributed Management Console to search on them?

AlexCUbisoft
New Member

Hello,

Is it normal that every time indexers restart, we have to manually add them back in the search head DMCs before we can search on them?

Thanks
ciao
Alex

0 Karma

ykou_splunk
Splunk Employee
Splunk Employee

The indexers should automatically re-appear when restart finished.

neelamssantosh
Contributor

Just for confirmation.
Have you implemented clustering ..

0 Karma

AlexCUbisoft
New Member

Hello!

Yes, we have 6 indexers that are in a cluster with a cluster master.
We have 3 searchheads used for different clients.

When we restart one of the indexers, if we go in the DMC, in "Indexing Performance: Deployment"
we see there's a missing indexer, the one we restarted. Our searches return gaps in them.

To be able to search from that indexer again, in the DMC, we to go in "Setup" , although there we see all the indexers properly configure, we simply have to click "Apply Changes". Back in "Indexing Performance: Deployment", the missing indexer is there. And we can do searches on everything.

Thanks for the help!
ciao
Alex

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...