Getting Data In

Can the Cluster Master Also Do Indexer Discovery in the outputs.conf

dstuder
Communicator

I've got my universal forwarders and heavy forwarders doing indexer discovery through the cluster master like so ...

 

**************************
*      outputs.conf      *
**************************

[indexer_discovery:clustermaster]
pass4SymmKey = {password}
master_uri = https://{my cluster master}.domain.foo:8089

[tcpout:clustermastergroup]
indexerDiscovery = clustermaster
useACK = true

[tcpout]
defaultGroup = clustermastergroup

 

Is there any reason I could not do the same in the cluster master's outputs.conf file? Basically, it would ask itself over 8098 who the peer nodes are.

Labels (2)
1 Solution

isoutamo
SplunkTrust
SplunkTrust

if you are using it for clients then you should use it also for CM. 

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

if you are using it for clients then you should use it also for CM. 

dstuder
Communicator

I did apply the outputs.conf config to the cluster master and indeed it did work just fine.

a_kearney
Path Finder

For the master_uri configuration did you use the same value as for the Forwarders or did you use the loopback interface address  (e.g. https://127.0.0.1:8089)?

 

0 Karma

dstuder
Communicator

I used the DNS entry for simplicity sake so that all the machines are set up the same way.

isoutamo
SplunkTrust
SplunkTrust
My personal advice is: use always dns names, never ips. That way it’s much easier to do changes later on.
0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...