We're monitoring our splunk environment through the DMC as well as a hand built dashboard consisting of data from the _introspection index. Search looks like:
index=_introspection sourcetype=splunk_resource_usage component=Hostwide search_group=Indexer | eval total_cpu_usage = 'data.cpu_system_pct' + 'data.cpu_user_pct' | timechart minspan=10s partial=f limit=25 Median(total_cpu_usage) AS cpu_usage by host
| eval max=100
We've recently added new servers, including new indexers, and have added them to the DMC successfully, along with assigning their roles there. However, we're not seeing the new servers in the above search. They don't have a search_group assignment. How do I assign the new servers a search_group?
Thank you
