I was just going thorugh the guide to integrate the searchhead cluster and indexer cluster . So the last step is to run a command on each of the search head separately ( for integration with manger node )
so my question is that if in production we had 50-100 search heads then if we strated doing on each search head it will take so much time and efforr isnt their any other way
Hi There Dear Splunkers,
if you are thinking to check the Splunk docs for this task, here it is:
if my post helped you in anyway, a karma would be helpful, thanks.
yes
Hi @jatin3101
Can you confirm the specific command you are running? If the SH is already part of a cluster then its likely you can push out the relevant configuration via the SH Deployer
For example:
# server.conf
[clustering]
manager_uri = https://yourCM:8089
pass4SymmKey = topSecretPasswordThis should connect the SHC members to your IDXC.
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing
50-100 search heads seems pretty large deployment.
-You can automate this using SH Deployer for SH Cluster members,
Configure server.conf from the deployer and push to all shc members.
-Or use Ansible, Puppet, Chef, or even a shell script with SSH to run the command across all SHs in parallel.
Regards,
Prewin
🌟If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!