- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- How to install an indexer and search head?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Need to install Indexer and search head
Is the installation of an indexer just a full installation or is there a specific way to install ?
how to install a search head from the "splunk-6.1.3-220630-x64-release" downloaded from Splunk ?
Please suggest me on how to proceed
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello
The installer file is the same. When the configuration applied is what defines how that server is going to behave, as an indexer or as a Search Head
Check the docs about distributed search:
http://docs.splunk.com/Documentation/Splunk/6.2.0/DistSearch/Whatisdistributedsearch
Regards
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello
The installer file is the same. When the configuration applied is what defines how that server is going to behave, as an indexer or as a Search Head
Check the docs about distributed search:
http://docs.splunk.com/Documentation/Splunk/6.2.0/DistSearch/Whatisdistributedsearch
Regards
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello gfuente,
So the installation is same as we do normally .
Just that we need to edit configuration files?
Regards.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
can you explain a bit more regarding
. what kind of configuration will promote a full instance installation of splunk as just an indexer or search head.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, Config through .conf files or UI is the same.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What are .conf file need to edit at Search Peer and Search Head.
Please elaborate.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
