Greetings,
We are migrating from a non-clustered environment to the Splunk cluster.
I wonder how Splunk Web Search App will be accessed: by accessing the master server or a Search Head ?
I assume it will be a Master, just want to make sure ...
The master node is only responsible for communicating to the indexers which one has to share what with who. It also tells the Search heads who to search for the relevant data, so in this case it is by searching on the search head.
Be sure you read and understand the documentation before you move to the clustered setup, the docs are pretty good and cover this in detail.
