Splunk Search

Can I use a search head in a search head pool to search both clustered and non-clustered indexers?



I am running Splunk 6.1, using Search Head Pooling. Our search heads currently search indexers that are clustered. I have a customer who wants to have the ability to search their own search peer via my search head, but their indexer is not clustered. Can I mix and match without any issues?

0 Karma

Splunk Employee
Splunk Employee

Should be no issue at all. Just add the other peers (indexers) as Search Peers in the Distributed Search menu. You'll notice the clustered indexers are already defined in there as a result of being a search head for the cluster.


0 Karma
Get Updates on the Splunk Community!

hadoop vs splunk

hiIn big data can we replace hadoop by splunk ? and why?do splunk do  all hadoop fonctionality

Apply a condition depends on a field or token

Hi teamI need to apply a different condition in one panel of my dashboard depending on a selected column in ...

Index with one sourcetype - search performance / best practices

Hello,I have created a few indexes, each containing data only from one source with one sourcetype.<BR />From a ...