Getting Data In

How do you make a Search Head talk to an Indexer?

proletariat99
Communicator

Yeah, I realize this is a really ridiculous question, but I just can't seem to find the answer -- which I assume is really simple -- in splunk docs.

I have a single search head and a single indexer and I'm trying to get the search head to use the data from the indexer. Could someone please tell me in really simple terms what I need to do to access the data on the indexer from the search head?

0 Karma
1 Solution

MuS
Legend

Hi proletariat99,

How about the docs http://docs.splunk.com/Documentation/Splunk/6.2.1/DistSearch/Configuredistributedsearch where you get multiple ways to do it.

cheers, MuS

proletariat99
Communicator

Thanks man. The keywords I was missing was "Distributed Search." My google fu was all jacked up.

ChrisG
Splunk Employee
Splunk Employee

We have added some explanataion and a cross-reference in the Search Manual to help people find the right content: http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Whatsinthismanual Sorry you had this trouble!

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...