Getting Data In

Migrating props.conf from a stand-alone to a clustered environment

Builder

Is there a list anywhere of which props.conf settings apply to indexing and which to searching?

I'm trying to migrate a bunch of apps to a new cluster and need to divide up those config files. I presume that timestamp, line breaking, meta data transforms, and routing & filtering commands all go on the indexer. Am I missing anything?

Just curious if this is laid out somewhere...

Thanks!

Craig

Tags (2)
0 Karma

Splunk Employee
Splunk Employee

Craig,

You can certainly split up your props.conf into multiple versions, each geared towards an indexer or search head, but I'd suggest just copying the same props.conf over to both servers. You won't experience any performance hits, and it's probably less confusing in the long run.

If you're dead set on splitting up your props, you can check out this link:
here

Hope this helps!

Explorer

Hi mloven
Is where any preferred place for props.conf in the search heads nodes in shc?

Thanks

0 Karma

Builder

And sedcmd would presumably go on the indexer...

0 Karma