Getting Data In

Is it possible to configure indexer discovery with CLI ?


Is possible to configure indexer discovery with CLI on master and forwarder? Thanks

For example:

In the master node's: server.conf:

    pass4SymmKey = my_secret
    indexerWeightByDiskCapacity = true

In each forwarder's outputs.conf:

    pass4SymmKey = my_secret
    master_uri =

    autoLBFrequency = 30
    forceTimebasedAutoLB = true
    indexerDiscovery = master1

    defaultGroup = group1
0 Karma

Ultra Champion

hello there,

i dont think there is a way to set it up via CLI
with that being said, why would you want to manually write a file to each forwarder?
you can use a deployment server and delpoy an app with outputs.conf with indexers discovery to all your forwarders with a click of a button
see here:

hope it helps

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...