Why are the logs that are being forwarded to the indexer, cannot be seen on the search head?

[prateedshetty]

I can see the logs on the indexer but they aren't searchable on search head.

I've already checked for -

• The index is main and is a default for the user.
• Under monitoring console, I can see the indexer is UP and configured.

This indexer is also the license master.

[p_gurav]

Hi,

Follow the procedure in documents for adding search peer:

https://docs.splunk.com/Documentation/Splunk/7.0.2/DistSearch/Configuredistributedsearch

[valiquet]

Have you added your idx as search peers?

You can try
|tstats count where index=* by index