Getting Data In

How can I monitor the indexers in cluster via DMC?



I would like to know how to configure the DMC to monitor the indexers in the indexer cluster.

In my understanding, the indexers (peer nodes) should not be registered to the DMC and the cluster master only has to be registered in the indexer cluster. But the DMC default alert function such as "Abnormal State of Indexer Processor" searches "splunk_server_group=dmc_group_indexer".
"dmc_group_indexer" is defined at assets.csv file which is configured when the distributed search peer is changed, and "dmc_group_indexer" field should include the indexers information.
However, in the indexer cluster environment, the indexers are not DMC's distributed search peers because the DMC has only cluster master so the result of "splunk_server_group=dmc_group_indexer" shows "No results found".

Is my understanding correct?
Could you kindly tell me what to do for monitoring indexers in the indexer cluster?

0 Karma


I think you need to set up the indexers as peers in the DMC instance first because you will be searching the _introspection index when you use the DMC dashboards.

Then later you need to register the indexer nodes as well as the cluster master in the DMC settings. Pick the right server role from the list

0 Karma

New Member

Were you able to fix this ? I am facing same issue.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>