Splunk Enterprise

SHC not syn conf to other member

tkdguq0110
Path Finder

Hi all.
I have one SHC with 3 search heads
I thought if I create a HEC using web gui in specific memer, others were replicated HEC But NOT

how should I do to fix that?
my SHC member have replication_port = 9887 in server.conf

Labels (2)
0 Karma
1 Solution
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 4)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...