I'm recently checking "health check" of DMC, but the following warning is being issued.
But In my server configuration, only one stand-alone Splunk is standing.
And the following roles are being applied to the splunk instance as per the manual in DMC.
· Indexer
· License master
· Search head
Why does such a warning appear in a stand-alone environment?
How can I change the setting to avoid this warning?
Hi yutaka1005!
This warning appears because your search head and license master roles do not have an outputs.conf forwarding it's data to the indexers. In other words a non-indexer role is indexing data.... This is a distributed deployment best practice check, which obviously doesn't apply, as you are not running a distributed deployment...
You can disable this check by navigating to Monitoring Console > Settings > Health Check Items and disabling the "Local indexing on non-indexer instances" health check item.
Hi yutaka1005!
This warning appears because your search head and license master roles do not have an outputs.conf forwarding it's data to the indexers. In other words a non-indexer role is indexing data.... This is a distributed deployment best practice check, which obviously doesn't apply, as you are not running a distributed deployment...
You can disable this check by navigating to Monitoring Console > Settings > Health Check Items and disabling the "Local indexing on non-indexer instances" health check item.
Hi mmodestino!
Thank you for answering!
I understood that this health check is for distributed environment and not necessary in a single environment.
And thank you for carefully telling me how to invalidate.
I disabled this health check at DMC.