Getting Data In

How can I monitor the indexers in cluster via DMC?

tom8h
Explorer

Hello,

I would like to know how to configure the DMC to monitor the indexers in the indexer cluster.

In my understanding, the indexers (peer nodes) should not be registered to the DMC and the cluster master only has to be registered in the indexer cluster. But the DMC default alert function such as "Abnormal State of Indexer Processor" searches "splunk_server_group=dmc_group_indexer".
"dmc_group_indexer" is defined at assets.csv file which is configured when the distributed search peer is changed, and "dmc_group_indexer" field should include the indexers information.
However, in the indexer cluster environment, the indexers are not DMC's distributed search peers because the DMC has only cluster master so the result of "splunk_server_group=dmc_group_indexer" shows "No results found".

Is my understanding correct?
Could you kindly tell me what to do for monitoring indexers in the indexer cluster?

0 Karma

asimagu
Builder

I think you need to set up the indexers as peers in the DMC instance first because you will be searching the _introspection index when you use the DMC dashboards.

Then later you need to register the indexer nodes as well as the cluster master in the DMC settings. Pick the right server role from the list
https://docs.splunk.com/Documentation/Splunk/6.5.3/DMC/Configureindistributedmode

0 Karma

Bhjindal
New Member

Were you able to fix this ? I am facing same issue.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...