Splunk Enterprise Security

Can multiple search head clusters connected to the same index use port 8080?

Explorer

Hello,

Currently we have Single Search Head Cluster with Enterprise Security and single Indexer Cluster. As part of the platform uplift, we would like to introduce a new Search Head Cluster (with no ES) and it will be connected to the same Indexer Cluster.

Currently we are using port 8080 for the SHC communication, can we use the same port for the new SHC as well?
All (old and new SHC) are on the same subnet.

0 Karma

Builder

yes you can

Explorer

Thanks Amitm05. I will test the deployment and will accept your answer.

0 Karma

Builder

Alright. Sure

0 Karma