Hi,
In a distributed system, We have multiple Splunk Instances(License Master, Search Head and Master Node) which are not in use now.
I am now looking to reuse those instances to create a SH cluster.
Is there any way to cleanup (not reinstalling) a Splunk Instance and re-assigning it a new role.
Don't do it. The SHC manual explicitly says each cluster member must be a freshly installed instance of Splunk. Re-installing is much easier than cleanup would be, anyway.
I'd be interested in understanding your reasons for preferring to reuse/cleanup rather than just install a new instance.
Don't do it. The SHC manual explicitly says each cluster member must be a freshly installed instance of Splunk. Re-installing is much easier than cleanup would be, anyway.