Deployment Architecture

index-cluster

vumanhtai
Path Finder

We have two indexer, When I created new index on Master Node and pushed them into 2 indexer, Only one Indexer can received configuaration changes from Master Node and the others can't received
All the connection between Indexer 1,2 and Master Node are working correctly, include releated ports
related port
related portss
!please help me to resolve it

0 Karma

MousumiChowdhur
Contributor

Hi!!

Can you check your monitoring console to find your indexer clustering status and "Indexer Clustering:Service Activity" for any warning or error over the time? Also, make sure you get your indexers listed in the peers in the indexer clustering.

0 Karma

traxxasbreaker
Communicator

On your master node, please try $SPLUNK_HOME/bin/splunk show cluster-bundle-status. In the output, are all of the indexers you're expecting showing that they are connected to the cluster master, and do they all show that they have the same bundle?

0 Karma

p_gurav
Champion

Hi vumanhtai,

Could you please check master_uri configuration in server.conf file of the indexer which is not receiving configurations. The file will be at $SPLUNK_HOME/etc/system/local directory.

0 Karma

rashid47010
Communicator

Hi
If i have only two indexers then how can i create rwplication without being having third index instance as cluster master.

Can i make any one as claster master as i have only two indexers ?

0 Karma

vumanhtai
Path Finder

thank you

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...