We have nine sites in a multi-site clusterwithindexers at each site ranging from three to 15 servers. Each site's indexers are all on the same vlan and ip subnet for for their region. I have a n...
Hi all,
I'm demoing out a setup with two sites, but the only thing site 2 has is an Indexer. The only purpose of the second site's indexer is disaster recovery. The idea is that I want site 2 (I...
I'm seeing the error below under messages in my Splunk enterprise console:
Missing or malformed messages.conf stanza for TCPOUT:FORWARDING_BLOCKED_Indexer IP ADDress_default-autolb-group DC-Host N...
...eads in their outputs.conf only list the six Indexers assigned to Site 2
However all Search Heads in their server.conf file have this stanza: [clustering] multisite = true
So the question is s...
I am going to create a multiple site clusterwith Splunk 6.5 enterprise.
According to Splunk document of "Configuremultisiteindexerclusterswith server.conf". the "mode" under "[clustering]" s...
Hi Community Members,
I would like to migrate indexes from one multisitecluster to another multisitecluster. Both themultisitecluster have same RF/SF. What will be the steps for this ?
I h...
I have 6 different DCs with standalone Splunk ENT installed working as indexers and no replication for security reasons.
Need to configure a SH to search across different DCs? Is this a p...