Deployment Architecture

Search Head and 2 peers, how setup


hey guys, i need some help

i have 3 machines, and 2 of than is receiving data, and i want to user the third machine to search on the others, how i can proceed?

Tags (1)
0 Karma


You do exactly what your question suggests. You set up Splunk on the third, and through the management GUI you delegate its searches to the two indexing peers.

This is an Enterprise-only feature.


Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!