Monitoring Splunk

Distributed Monitoring console unable to find indexers


I followed the instructions for setting up the monitoring console in distributed mode. I have added the cluster master, search heads, and deployment servers as search peers.

The monitoring console can see the cluster master and identify the number of buckets, amount of data, CPU utilization, etc. But none of the index cluster members show up.

It is a multi-site cluster with two sites. Does the monitoring console need to be in site0? Any other ideas on what might be causing this issue?


0 Karma



you need to add the Monitoring Console Search head as a cluster search head, the master will than let the MC SH know of all indexer peers automatically present or future once 🙂

If the answer helped please accept it 🙂


Did this work for you ?

if it helped please accept the question 🙂

0 Karma


This helped me out (over 2 years later). We just need to remember to go to the MC ==> General Setup and accept the changes after adding the MC Server as a Cluster Search Peer. Thank you.

0 Karma


I guess, you should add all indexers to the Splunk enterprise instance which hosts your MC.

You can do it via the server which contains the Monitoring Console UI

Main Splunk -> Settings -> Distributed search » Search peers   and add/authenticate your indexers which are missing
 Then in the MC,  Settings -> Distributed -> Apply Changes  (Ensure all the indexers are in the list below and roles are correct)

Refer to this doc for more details on how to activate distributed search.

0 Karma


But, Splunk doc advise us not to add Indexers manually as search peers. (Refer 5th point - "Do not add clustered indexers"

0 Karma
Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! 👏 Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: CFP Site: CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...