Deployment Architecture

Is there a CLI command to enable or disable serach peers in Splunk 6.3.1?

basanthp
Path Finder

I have added the PROD and DR indexer hosts using add search-server CLI command. Now my requirement is to keep the PROD indexers as enabled and DR indexers as disabled. Is there a CLI command to achieve this? Do I need to disable via UI only?

0 Karma

renjith_nair
Legend

You can remove a search peer using web or CLI

splunk remove search-server -auth admin:password -url 10.10.10.10:8089

http://docs.splunk.com/Documentation/Splunk/6.2.0/DistSearch/Removeasearchpeer

Happy Splunking!
0 Karma

basanthp
Path Finder

@Renjith, I am aware of the add and remove CLI commands. But my requirement is to enable or disable the search peers which has been added already. During Active-Passive switchover, I will disable the active peers and enable the passive peers (like we do in the UI -> Distributed Search -> search peers option).

0 Karma

renjith_nair
Legend

Normally for all operations from web, there should be CLI as well as configuration parameter available in splunk.

Are you looking for

splunk disable dist-search -auth admin:password

Sorry I don't have a splunk env to test it now.

./splunk help distributed
Happy Splunking!
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...