Deployment Architecture
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Quarantine a search peer but it still shows up in search

dujas
Explorer
‎05-21-2022 03:53 AM

Hi Splunk gurus,

I have a deployment like below:

3 nodes as Search Head cluster, 3 nodes as Search peers and 1 manager node of this indexer cluster. The SHC is connecting to the indexer cluster via https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/SHCandindexercluster#Integrate_with_a_...

When I quarantined one of the indexers(search peers), it did say that one of the indexers is excluded,  this only showed up in the web page of manager node (which is working as a search head as well) but not in the page of any other search head, is this normal?

Thanks.

Labels (2)
0 Karma
Reply
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...