Splunk Enterprise

Disable indexer discovery on indexer cluster

nicolsa
Observer

Hello,

 

how to disable indexer discovery from indexers ? (Icmp pings to forwarders ?)

Would Ihave to create an app to deploy on the indexer cluster which would contain file restmap.conf in local folder with  stanza like this :

[indexer_discovery:indexer_discovery]

disabled=1

 

 

Or another Way to do ?

 

thank you for your help

 

 

 

 

Labels (1)
0 Karma

inventsekar
Super Champion

 

the restmap.conf settings never mentioned about "indexer_discovery"

https://docs.splunk.com/Documentation/Splunk/8.0.6/Admin/restmapconf

 

EDIT -

its actually on server.conf on indexer clusters and outputs.conf on the forwarders:

https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/indexerdiscovery

 

it got some advantages:

https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/useforwarders#Advantages_of_the_indexer_d...

 

to disable, you can simply dont set that indexer_discovery stanza. 

 

>>> Happy Splunking !
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>