Splunk IT Service Intelligence

ITSI : How to confirm that newly add SHC member is in synch with existing members hosting ITSI?

rbal_splunk
Splunk Employee
Splunk Employee

I have 3 Node Search Head Cluster member with ITSI app. This environment is operational .
Now we added 3 more Search Head Cluster Member.
How can I confirm that newly added SHC member is in synch with others for ITSI app?

0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

Here is After that we confirmed that all the members are in cluster using command

$SPLUNK_HOME/bin/splunk show shcluster-status
$SPLUNK_HOME/bin/splunk show kvstore-status

To confirm if itsi looked good , login to the new SHC member and navigated to ITSI app and in this App under configuration>Services and here count the ## of services ( i.e this should match with old SHC member)

In addition, navigated navigate to Setting>”Search and Report” verify KPI indicators like “>[Indicator - 3e6a914db63fa245b5df5358 - ITSI Search]”

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...