We have a single SearchHead Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a SearchHeadcluster...
...: am i able to use 3 searchhead nodes that are already pointing thethe back-end index cluster and then just run the commands toaddthese members tothesearchheadcluster (and elect a captain) &l...
...low, I am preparing for the future.
We can pump up the specs on theSearchHead, or create a new SearchHead. How do I decide which will work best? Another SH seems like it might add complexity, b...
I wish to uninstall an app from my SearchHeadcluster and cluster peers. Is this the following the way to go about it?
On each SearchHead and peer cluster member:
1.Run the following c...
I would like to enable tosearch assistant on my SearchHeadCluster. The documentation recommends an edit tothe file user-prefs.conf.spec.in. (Is this a bad idea?)
Described here:
https://d...
I am adding a new searchheadtothe existing searchheadcluster. I want toaddthe same userstothe new searchhead, from my LDAP. If I copy the authorize.conf & authorization.conf, will it a...
...uggestions?
EDIT: I forgot to mention that if I manually go to each searchhead and addthe appOrder parameter tothe standard user-prefs app, then it works. I just would like to do it centrally from the d...
...ttempt tosearch using both the strong and weak searchhead and slow me down?
What it comes down to is that I do not need the full "cluster", I just need to keep my user data replicated. It seems t...
Hi,
We are running Splunk 6.3.3. Our searchheadcluster (4 searchheads at the moment) is using SAML authentication.
We are looking for a way toadd an user with Splunk authentication without add...
...peers.
My original plan was this:
Addthe old standalone server tothe new searchhead as a search peer
Instruct userstosearch from the new searchhead instead of the old standalone s...