Deployment Architecture

Why is my search head missing in Distributed Management Console (DMC)?

timmy13
Communicator

I'm sure this is going to be something simple. I have a small Splunk POC environment consisting of a cluster master, 3 indexers, and 2 search heads. When pulling up the DMC on the master, I see all 3 indexers, itself (the master), and 1 search head. But the other search head never shows up. I've even erased and reinstalled Spunk on this search head to no avail. It IS reporting to the license server, and I can search my data with it. Just can't see it in DMC.

Thanks

0 Karma

ThomasControlwa
Path Finder

many thanks,

solution is right @ aaraneta
...and you are hosting the DMC on an instance other than the cluster master, you must add the cluster master as a search peer.

Works very well!

0 Karma

ThomasControlwa
Path Finder

it is also very important to apply the changes by MC (button in the top right)

0 Karma

hexx
Splunk Employee
Splunk Employee

Did you manually add that search-head as a search peer on the DMC / Cluster Master instance? This is a required step:

Repeat steps 3 and 4 for each search head, deployment server, license master, and nonclustered indexer. Do not add clustered indexers, but you must add clustered search heads.

timmy13
Communicator

Yes, I have added it as a search peer and it shows in the list as healthy. yet, does not show up in DMC.

0 Karma

hexx
Splunk Employee
Splunk Employee

That's unexpected. I'm not sure what to suggest besides attempting a factory reset of the DMC, which can be done via a dedicated button in the DMC general setup page.

Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...