Splunk Search

How to configure Search Head in one of the Index Server

christay
New Member

Hi I have the following setup :

1 x Node Master with 2 x indexer ( Clustering)

How can I configure to designate one of the indexer as my search head server.

Currently the default search head is pointing to my Node Master.

Thanks for the advice.

Tags (1)
0 Karma
1 Solution

cpetterborg
SplunkTrust
SplunkTrust

If you have an index cluster, you don't want to use an indexer was a search head. Indexers in a cluster should only have that one role, and no others.

View solution in original post

0 Karma

christay
New Member

Hi all, thanks for the input. I will relook into my design.

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Now this isn't really the best idea and you really should get a stand alone search head ASAP, but if you run searches from the Cluster Master user interface, then the searches will search the data on both indexers...

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

If you have an index cluster, you don't want to use an indexer was a search head. Indexers in a cluster should only have that one role, and no others.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...