Getting Data In

Is it possible to configure indexer discovery with CLI ?

Aftend1971
Explorer

Is possible to configure indexer discovery with CLI on master and forwarder? Thanks

For example:

In the master node's: server.conf:

    [indexer_discovery]
    pass4SymmKey = my_secret
    indexerWeightByDiskCapacity = true

In each forwarder's outputs.conf:

    [indexer_discovery:master1]
    pass4SymmKey = my_secret
    master_uri = https://10.152.31.202:8089

    [tcpout:group1]
    autoLBFrequency = 30
    forceTimebasedAutoLB = true
    indexerDiscovery = master1
    useACK=true

    [tcpout]
    defaultGroup = group1
0 Karma

adonio
Ultra Champion

hello there,

i dont think there is a way to set it up via CLI
with that being said, why would you want to manually write a file to each forwarder?
you can use a deployment server and delpoy an app with outputs.conf with indexers discovery to all your forwarders with a click of a button
see here:
http://docs.splunk.com/Documentation/Splunk/7.0.3/Updating/Aboutdeploymentserver

hope it helps

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...