Hello, For the internal indexes of the search head, should we send them to be stored on the indexers? If so, can we send them to both indexers without them being in a cluster? Additionally, I ha...
See more...
Hello, For the internal indexes of the search head, should we send them to be stored on the indexers? If so, can we send them to both indexers without them being in a cluster? Additionally, I have installed the add-on on the search head, and the index where the collected data is stored is located on the search head at the following path: /opt/splunk/etc/apps/search/local/indexes.conf. How can I direct this index to both indexers that are not in a cluster?