Getting Data In

Can you help me with an issue when adding a second indexer?

xindeNokia
Path Finder

one Search head / one indexer system — try to add a second indexer.

After I added the second indexer, in the search head (SH) — search peers page, it shows the newly added box state is up, but under the SH's monitor console, it still only shows one indexer.

Question:

How do you set the new search peer as the second indexer so that we can use one SH to search data from both indexers?

Any help is appreciated here.

Thanks!

0 Karma
1 Solution

ragedsparrow
Contributor

Can you search the data from the 2nd indexer on the Search Head?

For the Monitoring Console, you will have to go to Settings -> General Setup and add the Indexer Server Role for the new indexer. Then it should start showing up in the dashboards.

View solution in original post

0 Karma

ragedsparrow
Contributor

Can you search the data from the 2nd indexer on the Search Head?

For the Monitoring Console, you will have to go to Settings -> General Setup and add the Indexer Server Role for the new indexer. Then it should start showing up in the dashboards.

0 Karma

xindeNokia
Path Finder

Thank you for the quick answer! I found the general setup tab and it is working now. 🙂

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...