Why don't I see my three Splunk servers via the rest call?

[danielbb]

I'm running the following command -

| rest /services/server/sysinfo

And it shows the indexer and the search head but not the heavy forwarder.

What can it be? 

[isoutamo]

If you want to see also those HFs you must to add those as a search peers to your SH. Usually this shouldn’t do any other SHs than MC. In MC just add those as indexers and add separate own group like HFs to those. Then you can query from those by using that group on rest. 

[danielbb]

Thank you @isoutamo, when trying to put the HF as a search peer in the SH and it gives this error -  
Encountered the following error while trying to save: Status 401 while sending public key to search peer https://<ip>:8089: Unauthorized

[isoutamo]

When you are adding search peer you must have/know admin level account on that HF. Then use it when you add a new peer.

[richgalloway]

The rest command is processed by the local search head and all search peers, but not by heavy forwarders.  That's the way searches work.  No query is sent to a HF.