Splunk Search

How does a Splunk server decide which IP to use when it connects to a master node?

alanzchan
Path Finder

We have two IPs for a single indexer host.

We are using this command to add a peer to the indexer cluster:

/opt/splunk/bin/splunk edit cluster-config -mode slave -master_uri https://<deployment server>:8089 -replication_port 8080 -secret <REDACTED>

How does the indexer(slave node) decide which IP to use? Is there a configuration we can use to determine which IP Splunk uses to connect to the master node?

0 Karma

skalliger
SplunkTrust
SplunkTrust

Hi,

you can either control this yourself or let the OS decide. Refer to the splunk-launch.conf:

SPLUNK_BINDIP=
Specifies an interface that splunkd and splunkweb should bind to, as
opposed to binding to the default for the local operating system.
If unset, Splunk makes no specific request to the operating system when
binding to ports/opening a listening socket. This means it effectively
binds to '*'; i.e. an unspecified bind. The exact result of this is
controlled by operating system behavior and configuration.

Skalli

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...