Deployment Architecture

Why is my REST call from one search head to another search head not returning anything?

net1993
Path Finder

Hello

I have a REST call and I am on SH1, and I am trying to follow the REST, but there comes nothing from SH2. Where is the data I am interested located at?

rest :

| rest splunk_server=* count=0 /services/saved/searches 

the same rest is working ok if executed locally on SH..

Anybody experience the same issue and have a clever solution?

Thanks.

Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Search heads don't search other search heads (OK, there are exceptions, but they don't apply here). Searches are executed by indexers. If you need data from SH2 then you need to sign in to SH2.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Search heads don't search other search heads (OK, there are exceptions, but they don't apply here). Searches are executed by indexers. If you need data from SH2 then you need to sign in to SH2.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.