As per subject,
when accessing my cluster master -> clustering panel, in Indexes tab I'm only shown _audit and _internal indexes, while for sure I have another one (index=cisco) with data in i...
...un amongst multiple SH without causing conflicts?
ENVIRONMENT: Search Head Clusterwith 3 members; one standalone search head; and 10 indexer peers (no clustering). Our goal was to install the P...
Hi All ,
When we go to theindexcluster master UI->Settings-> general setup tab we can view the whole infra of the splunk i.e instance(host), instance(server name) , server roles etc.., The...
...heer number of suggested configuration changes. We have three indexers in our cluster. I wanted to throw these configurations out there as fodder and see what youguys come back with. Thanks! I...
In IndexerClustering, is there a way to push theconfiguration bundle from a Cluster Master to theIndexers and explicitly don't restart theIndexers?
I'm thinking there might be an updated configur...
Hello!
We need to implement architecture ES Splunk to 400 GB in clustering (SH, IDX). How we should to count numbers of idx for this capacity? In Splunk docs recommend to use per indexer up to 1...
Hey,
I have set up a clustered Splunk deployment in a lab environment to test. By default, I see _internal and _audit as my replicated indexes. The main index is not there for some reason. I h...
i have added "repFactor=auto" to each peer's indexes.conf and "rolling-restarted" them all
i have put into them some data which can be seen on searchhead
but they are still not there
Hi Splunk-Community,
As I found out through the Splunk docs, it is possible to run a deployer for a search head cluster on an existing master node of an indexercluster.
I found a lot of d...
Hi All,
I am running a cluster of 3 nodes - indexers, with one among 3 as master. When i log on theClustering dashboard of both the peer nodes, i cannot see the peer dashboard as decribed in the...