Getting Data In

Error while adding standalone indexer to search head cluster

Prakash493
Communicator

Hi , We have a distributed deployment environment , we have 6 indexers clustered , we have 3 search head clustered , we are adding a standalone new indexer , we are not adding this indexer to the existing cluster.

We want the data that is lying on this standalone indexer to be searchable from our search head cluster , I tried to add it through GUI by going to distributed search but after adding it to one search head, its got added successfully, while I am trying it to add to other search heads its not adding- it's saying it encountered the following error while trying to save:

Failed to proxy search-server command request to Captain. Reason : ERROR: A peer with uri of https://xxxx already exists.

Please help me.

0 Karma
1 Solution

adonio
Ultra Champion
0 Karma

adonio
Ultra Champion
0 Karma

Prakash493
Communicator

added the indexer address to the host file of the sh , Because the dns name is not able to resolved.

0 Karma
Get Updates on the Splunk Community!

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...