Deployment Architecture

Setting up distributed search peers in a search head cluster does not take effect on other search heads.

ben_leung
Builder

I have setup a search head cluster. I go to the UI to add search peers. The current search head has gotten the configuration, but the rest of the cluster has not synced. The captain has not replicated the change to other search heads. Is this expected?

Tags (1)
0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Yes, you must set the search peers on each search head in the cluster. For details, read:

http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/Connectclustersearchheadstosearchpeers

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...