I am trying to use invalid_replication_address to tell a cluster master running in front of an ELB to contact the indexer on a different address. However when i try to add the peer I get the f...
Hi,
I have done a lot of researching about sizing a Splunk Cluster and have a few in deep questions:
Settings: 100 GB a Days Index Tage; 3 NodeCluster; RF/SF 2
Scenario 1: All NodesUp a...
....2, to a later 6.x cluster, such as 6.3 or 6.4, you must take down all clusternodes. You cannot perform a rolling, online upgrade. If you have a multisite cluster, however, you can upgrade one site a...
Hello,
I have an indexercluster setup. I don't want to configure a search head node in a cluster. I want to start a new Splunk Enterprise instance that I want to enable as a search head and s...
...nstallation Manual.
If the search heads in the indexercluster are members of a search head cluster, see Upgrade a search head cluster.
Start the peer nodes and search heads, if they are not a...
I have updated my splunk infra from 6.2 to 6.3
1) Deployment server -1
2) indexercluster servers -2
2) sh head cluster servers -2
Update process was successful on all nodes but I am u...
I have an Indexercluster with 4 nodes and a master, currently the four peers are the only nodes ingesting data (I'm unsure if this goes against best practice or not). I'm curious, if I start data r...
...aster.
Upgrade the master node, following the normal procedure for any Splunk Enterprise upgrade, as described in How to upgrade Splunk Enterprise in the Installation Manual.
Start the master, a...
I manage a couple of small Splunk clusters, and for the 1st time, I need to build one form scratch. I am testing in our sandbox environment, but when I bring the clusterup, I end up with index i...