Deployment Architecture

full removing search head clustering

kannu
Communicator

Hello Splunkers ,

Currentlly i am having three search heads in search head clustering , What i want is to remove each of them from clustering .

removing the below entries from serve.conf and restarting each instances will do the charm or not .
[replication_port://xxxx]

[shclustering]
disabled = 0
mgmt_uri = https://XXX.xxx.xxx.x:8089
pass4SymmKey = $1$IfXxB0RZxuxw==
id = BFE7xFF-00x7-4x9E-845C-24591xB19

Note : indexers are not clustered

Please and let me know if i am missing something

Tags (1)
0 Karma

kannu
Communicator

No problem , I have figured it out , how to do that .

0 Karma

adonio
Ultra Champion

please share to help others and accept your answer

0 Karma
Get Updates on the Splunk Community!

3 Ways to Make OpenTelemetry Even Better

My role as an Observability Specialist at Splunk provides me with the opportunity to work with customers of ...

What's New in Splunk Cloud Platform 9.2.2406?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2406 with many ...

Enterprise Security Content Update (ESCU) | New Releases

In August, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...