Distance between a Search Head and an Indexer

[fk319]

We are looking at merging Splunk instances between different data centers and having a single Search head cluster.

I am concerned that having the Search and Indexer so far, 20-40 ms ping times, will cause an issue.
So how far apart can the systems be? We are looking at having our indexers in a few different locataions.
-- Frank

[jasonnadeau · Accepted solution]

Frank would you be using distributed search feature or are you configuring the web.conf on the search head to reach back to a different splunkd instance running on your indexer?

[fk319]

I would be using a distributed search.
I am not sure what the difference between your two questions.