Knowledge Management

Peer index without configuring master node

shahk
Explorer

Hello ,

I have 4 VMs for splunk index peering setup, out of which i will use 1 vm for Splunk License manage, 1 for search head and rest of two as a Index server.

When I try to configure Peer node , it asks for maser URl, do I have to make one of the index server as maser node then only I can configure peer node or is there any was to configure peer nodes without master node?

~Krimesh

Tags (1)
0 Karma

somesoni2
Revered Legend

The term peer node is Indexer cluster specific. You need a cluster master node (first) to configure an indexer cluster. Assuming you just want the other two VM to be Indexers, a Splunk Enterprise instance is already an Indexer when installed (and a Search Head too). Just follow instructions from below link to set it as Standalone Indexer in distributed indexer. It lists all the configuration that you need to do in Indexer, forwarder and search head.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Advancedindexingstrategy#Deploy_indexers_i...

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...