Splunk Enterprise

How do I find which Splunk server is my Search head cluster?

SamHTexas
Builder

How do I find which Splunk server is my designated Search head cluster?

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Technically, a Splunk search head cluster is at least 3 nodes so no one server will be your SHC.

Start by examining the server.conf file on each instance for a [shclustering] stanza.  That should be present only on SHC members.

---
If this reply helps you, an upvote would be appreciated.
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.