Splunk Enterprise Security

Can multiple search head clusters connected to the same index use port 8080?

spectrum2035
Explorer

Hello,

Currently we have Single Search Head Cluster with Enterprise Security and single Indexer Cluster. As part of the platform uplift, we would like to introduce a new Search Head Cluster (with no ES) and it will be connected to the same Indexer Cluster.

Currently we are using port 8080 for the SHC communication, can we use the same port for the new SHC as well?
All (old and new SHC) are on the same subnet.

0 Karma

amitm05
Builder

yes you can

spectrum2035
Explorer

Thanks Amitm05. I will test the deployment and will accept your answer.

0 Karma

amitm05
Builder

Alright. Sure

0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...