Splunk Search

Configure Search Head Cluster Peers to search a single indexer vs. an indexer cluster 6.2.5?

lisaac
Path Finder

I have setup a 6.2.5 SH cluster. The SH cluster consists of 3 SHs and an additional host functioning as a SH deployer. I have successfully configured the SH cluster to communicate with an index cluster. What is the best way to add a single non-clustered indexer to a SH cluster? It looks like I would need to use the CLI and run the command splunk add search-server on each of the SH cluster members. Any thoughts from anyone?

Tags (3)
0 Karma

lguinn2
Legend

Yes, that is how I would do it!

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...