Is there a list anywhere of which props.conf settings apply to indexing and which to searching?
I'm trying to migrate a bunch of apps to a new cluster and need to divide up those config files. I presume that timestamp, line breaking, meta data transforms, and routing & filtering commands all go on the indexer. Am I missing anything?
Just curious if this is laid out somewhere...
You can certainly split up your props.conf into multiple versions, each geared towards an indexer or search head, but I'd suggest just copying the same props.conf over to both servers. You won't experience any performance hits, and it's probably less confusing in the long run.
If you're dead set on splitting up your props, you can check out this link:
Hope this helps!