Getting data into Splunk ES - Splunk Community

Getting Data In

I already have a Splunk Indexer, and the data is being sent there. I have a separate ES server. How do I view my data from here?

Add your indexer as a search peer on the ES server. Go to Settings->Distributed Search->Search Peers and click the green "New Search Peer" button.

---
If this reply helps you, Karma would be appreciated.

It looks like this feature is not compatible with a DEV license?

If you can only run a standalone instance then you'll have to re-install ES on that instance. Performance may be bad, but at least you'll have data.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...