Splunk Search

Multi indexer distributed search

New Member

I would like to index data separately using two indexers and have distributed search capability. I read here ( http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Whatisdistributedsearch
) in the documentation that a unique license key is required for each indexer for distributed searches. I am using 4.3 and would rather use a license master with an enterprise license utilized by my indexers. Is the documentation correct for version 4.3?

0 Karma

Re: Multi indexer distributed search


That documentation doesn't seem correct. It doesn't need a unique key (it did pre-license master).

I'll bring it to someone's attention.