Splunk Search

Multi indexer distributed search

mcgrathd
New Member

I would like to index data separately using two indexers and have distributed search capability. I read here ( http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Whatisdistributedsearch
) in the documentation that a unique license key is required for each indexer for distributed searches. I am using 4.3 and would rather use a license master with an enterprise license utilized by my indexers. Is the documentation correct for version 4.3?

0 Karma

Brian_Osburn
Builder

That documentation doesn't seem correct. It doesn't need a unique key (it did pre-license master).

I'll bring it to someone's attention.

Thanks!

Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...