Search Head and 2 peers, how setup

[felipesewaybric]

hey guys, i need some help

i have 3 machines, and 2 of than is receiving data, and i want to user the third machine to search on the others, how i can proceed?

[grijhwani]

You do exactly what your question suggests. You set up Splunk on the third, and through the management GUI you delegate its searches to the two indexing peers.

This is an Enterprise-only feature.

See

• About distributed search
• Designate the search head