Deployment Architecture

integrate standalone server into index cluster for search only

andymalato
Explorer

Hello All,

We currently have a single standalone deployment (index and search head on single system).  In addition, we have deployed a new index cluster (3 nodes) and single search head.  We will be migrating all of our forwarders to point to the newly deployed cluster.  However, we still have data on the single deployment server that has not aged out yet.   Does anyone know if it is possible to configure our search head to also search the old standalone Splunk environment ?  

 

Thanks.

 

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible.  Add the standalone instance as a search peer to the other search head.  The new SH then will search both the cluster and the standalone.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

andymalato
Explorer

Thanks, that worked perfectly!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible.  Add the standalone instance as a search peer to the other search head.  The new SH then will search both the cluster and the standalone.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...