Deployment Architecture

index-cluster

vumanhtai
Path Finder

We have two indexer, When I created new index on Master Node and pushed them into 2 indexer, Only one Indexer can received configuaration changes from Master Node and the others can't received
All the connection between Indexer 1,2 and Master Node are working correctly, include releated ports
related port
related portss
!please help me to resolve it

0 Karma

MousumiChowdhur
Contributor

Hi!!

Can you check your monitoring console to find your indexer clustering status and "Indexer Clustering:Service Activity" for any warning or error over the time? Also, make sure you get your indexers listed in the peers in the indexer clustering.

0 Karma

traxxasbreaker
Communicator

On your master node, please try $SPLUNK_HOME/bin/splunk show cluster-bundle-status. In the output, are all of the indexers you're expecting showing that they are connected to the cluster master, and do they all show that they have the same bundle?

0 Karma

p_gurav
Champion

Hi vumanhtai,

Could you please check master_uri configuration in server.conf file of the indexer which is not receiving configurations. The file will be at $SPLUNK_HOME/etc/system/local directory.

0 Karma

rashid47010
Communicator

Hi
If i have only two indexers then how can i create rwplication without being having third index instance as cluster master.

Can i make any one as claster master as i have only two indexers ?

0 Karma

vumanhtai
Path Finder

thank you

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...