what is difference between if search head fetching data from stand alone indexer and index clusterding environment

[lksridhar]

Hi Folks,

what is difference between if search head fetching data from stand alone indexer and index clustering environment. could you please explain how serach will work on both the setup.

[gcusello · Accepted solution]

hi lksridhar,
there are many differences between stand alone and clustered indexers.

From the Search Head point of view, the main difference is that there is another system (Master Node) that tells the Search Head where to find data (see http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Basicclusterarchitecture)

From the configuration point of view there's a difference because to configure search peers:
- in stand alone indexer you use [Settings -- Forwarding and Receiving],
- instead for clustered environments you use [Settings -- Indexers Cluster]

Bye.
Giuseppe