Deployment Architecture

Migrating Standalone indexers to Cluster

eduardkiyko_
New Member

Hi all, I have an issue, which I cant resolve for several days. I have 2 standalone indexers and recently created cluster master instance. I created 2 apps(one for CM and another for indexers), but indexers cant join into the cluster. All, what I can see it`s an error
alt text

My apps - https://drive.google.com/drive/folders/1uMhCeJlj-A0jg174_47FTGu-P-32QN89?usp=sharing

0 Karma

richgalloway
SplunkTrust
SplunkTrust

What does the indexer app do? Have you restarted the indexers?

---
If this reply helps you, Karma would be appreciated.
0 Karma

eduardkiyko_
New Member

Yes, I restarted indexers. This app holds config files which indexer requires to join to the cluster. I guess, there is a mistake in some of these files, but I don`t know in what exact file.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...