Deployment Architecture

Why is my search head missing in Distributed Management Console (DMC)?

timmy13
Communicator

I'm sure this is going to be something simple. I have a small Splunk POC environment consisting of a cluster master, 3 indexers, and 2 search heads. When pulling up the DMC on the master, I see all 3 indexers, itself (the master), and 1 search head. But the other search head never shows up. I've even erased and reinstalled Spunk on this search head to no avail. It IS reporting to the license server, and I can search my data with it. Just can't see it in DMC.

Thanks

0 Karma

ThomasControlwa
Path Finder

many thanks,

solution is right @ aaraneta
...and you are hosting the DMC on an instance other than the cluster master, you must add the cluster master as a search peer.

Works very well!

0 Karma

ThomasControlwa
Path Finder

it is also very important to apply the changes by MC (button in the top right)

0 Karma

hexx
Splunk Employee
Splunk Employee

Did you manually add that search-head as a search peer on the DMC / Cluster Master instance? This is a required step:

Repeat steps 3 and 4 for each search head, deployment server, license master, and nonclustered indexer. Do not add clustered indexers, but you must add clustered search heads.

timmy13
Communicator

Yes, I have added it as a search peer and it shows in the list as healthy. yet, does not show up in DMC.

0 Karma

hexx
Splunk Employee
Splunk Employee

That's unexpected. I'm not sure what to suggest besides attempting a factory reset of the DMC, which can be done via a dedicated button in the DMC general setup page.

Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...