Deployment Architecture

index-cluster

vumanhtai
Path Finder

We have two indexer, When I created new index on Master Node and pushed them into 2 indexer, Only one Indexer can received configuaration changes from Master Node and the others can't received
All the connection between Indexer 1,2 and Master Node are working correctly, include releated ports
related port
related portss
!please help me to resolve it

0 Karma

MousumiChowdhur
Contributor

Hi!!

Can you check your monitoring console to find your indexer clustering status and "Indexer Clustering:Service Activity" for any warning or error over the time? Also, make sure you get your indexers listed in the peers in the indexer clustering.

0 Karma

traxxasbreaker
Communicator

On your master node, please try $SPLUNK_HOME/bin/splunk show cluster-bundle-status. In the output, are all of the indexers you're expecting showing that they are connected to the cluster master, and do they all show that they have the same bundle?

0 Karma

p_gurav
Champion

Hi vumanhtai,

Could you please check master_uri configuration in server.conf file of the indexer which is not receiving configurations. The file will be at $SPLUNK_HOME/etc/system/local directory.

0 Karma

rashid47010
Communicator

Hi
If i have only two indexers then how can i create rwplication without being having third index instance as cluster master.

Can i make any one as claster master as i have only two indexers ?

0 Karma

vumanhtai
Path Finder

thank you

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...