Installation

How to configure member of search head cluster as search head in indexer cluster using splunk-ansible?

Flesz
Engager

I am deploying new Splunk environment using ansible-splunk git repository. (https://github.com/splunk/splunk-ansible)

I have installed search head cluster consisting of 3 servers and indexer cluster also 3 servers and one master, it's all been deployed with the ansible and working fine.

Now I need to connect search head cluster to indexer cluster and can't seem to find any option in splunk-ansible on how to do it.

I have done it manually using the command 

./splunk edit cluster-config -mode searchhead -master_uri https://10.10.10.10:8089 -secret splunk1234

How can I achieve it using splunk-ansible ?

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...