I have two search heads that are behind a load balancer in Splunk 6.1.4. They work fine when accessing via the load balancer, but if I try their individual URL to login into respective search head, I am unable to do so.
Here is my scenario: One search head is a master license server and the other search head is its slave. If I want to see the license usage information and log in via load balancer, I do not know which search head I will be directed to. If the load balancer directs me to the slave, then I am unable to view the license usage info since the slave does not have it, only the master does.
So in this scenario, it will be helpful if I can selectively go to the master server via direct http link URL. The web.conf looks like below: [settings]
I have similar setup and since we're using a Load balancer, the firewall rules for the Search Heads are configured to allow connection only through the load balancer IP/ CNAM. So, that's the reason the Search Head is not accessible directly.
IMO, you've two options:-
Configure appropriate firewall rules for your Search Head/License server node to allow connection outside of Load balancer.
I need license file information where it shows the license expiry date, type of license etc. Splunk fetches this information from $SPLUNK_HOME/etc/licenses/enterprise/. I installed this app but unfortunately it does not provide that kind of information.