SH clustering and monitoring console

[riqbal]

In my lab environment, I have indexer cluster with one search head.

I just recently configure sh clustering. to validate I create one user and it is replicated to searchead2. I have one captain and two search heads.

1- How can I validate that now SH clustering is integrated with indexer cluster.

suppose to run below command on where ?
splunk edit cluster-config -mode searchhead -master_uri https://xx.xxx.xxx.02:8089 -secret newsecret123

I run above command on each SH.?

2- How can I connect sh-cluster with monitoring console.

3- how can i connect searchhead/searchhead-cluster with license master.
my LM and MC roles are hosted on CM.

[ansif · Accepted solution]

1 - Run on each search heads. master_uri is your Indexer's cluster master.

https://docs.splunk.com/Documentation/Splunk/7.1.1/DistSearch/SHCandindexercluster

2- Add instances as search peers in your monitoring console instance,then setup monitoring console:

https://docs.splunk.com/Documentation/Splunk/7.1.1/DMC/Addinstancesassearchpeers
https://docs.splunk.com/Documentation/Splunk/7.1.1/DMC/Configureindistributedmode

3- You can use UI,CLI or configuration file.

Configuration file makes sense to deploy from deployer to all SHs.

https://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/Serverconf#License_manager_settings_for_con...
http://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/Configurealicenseslave
http://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/LicenserCLIcommands#Managing_license_slaves
http://docs.splunk.com/Documentation/Splunk/7.1.1/DistSearch/PropagateSHCconfigurationchanges

As you can see everything is documented in Splunk.