How to remove an indexer peer from an indexer cluster in Splunk 6.1? Getting error "'cluster-peers' is not a valid argument for the 'remove' command"

[a212830]

Hi,

I want to remove some legacy indexers from my cluster. I did the ./splunk offline --enforce-counts command, and now I tried the remove cluster command:

./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C

Splunk comes back with:

Command error: 'cluster-peers' is not a valid argument for the 'remove' command.  Please type "splunk help remove" for usage and examples.

Is 6.1 different somehow?

[nawazns5038]

 ./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C

Did you perform the command from the cluster master ??

[sloshburch]

In this context, you can just turn offline that instance and destroy it. The master will handle the bucket fixing activities to make sure the copies of the data exist elsewhere. Make sure all the indexes have at least a replication factor of 2 otherwise you will lose data that only exists on that host.

This page covers that topic:
http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_pee...

Notice that in this context, you should run ./splunk offline rather than ./splunk stop.