I have 2 indexers. I've just migrated one 6.1.3 indexer from Windows to Linux (in prep for an upgrade to 6.3 but want a stable environment first). Everything seems to be working. The search peers all say they are connected from the web front ends. When I run a search data from only one indexers data is returned. However, if I put the term splunk_server=* in the search results return from both indexers. Anyone have any idea what might be wrong?
