Deployment Architecture

new indexer , how to configure to talk to deployment server

tven
Explorer

We had two indexers splunk1 and splunk2. Splunk2 lost all its data due to a SSD failure. Now its back with a new card with RAID 10. After installing splunk again, how do i tell it to talk to the deployment server? Also how do i make sure data is distributed between both indexers ?

I am trying to look through docs, but not finding the right ones that talks about this.

Tags (2)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Instructions for configuring a deployment client can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Configuredeploymentclients

Instructions for configuring distributed search can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Configuredistributedsearch

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Instructions for configuring a deployment client can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Configuredeploymentclients

Instructions for configuring distributed search can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Configuredistributedsearch

Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...