Hi,
I am wondering if one Search Head Cluster can searchacrossmultipleIndexerClusters.
I have found this doc http://docs.splunk.com/Documentation/Splunk/6.3.3/Indexer/Configuremulti-clusters...
...ractice, poor judgement, or as intended.
We have 8 main indexers that do what indexers do, all clustered as peer nodes.
The deployment server is the master node and the search head for the cluster (w...
A standalone SH had 2 multipleindexerclusters configured as per the docs below, which has been working well a while until I added 3rd cluster.
https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer...
...niversal forwarders pushing data to an indexer / search server. If I wanted to consider high availability options within a single site, I might want to cluster the indexers, but as I only have two s...
Hey Splunkers! We have multiple IDX/SH clusters that are peered based on regulatory/compliance/operational reasons. We have a specific SHC that we would like to de-peer from an older IDX cluster. Index...
...ull data across sites. I looked at affinity (but that is multisite only) and distributed search (but that is non-cluster only). Is it possible to restrict my SearchHead1 to only searchIndexer1?
We have a cluster master managing 2 indexers where we can push our indexes.conf in master apps, we have a single search head ( this is lab env), and multiple forwarders. When creating an app to d...
Hey,
I am thinking of having 2 indexerclusters in my environment:
1. “Raw data” cluster, which receives data from windows event forwarders & other “external” connectors.
2. Summary cluster...
...ocs.splunk.com/Documentation/Splunk/9.0.2/Admin/Limitsconf
One environment I use have multiple standalone search heads that all execute searches in the same indexercluster. The measured median c...
I have 6 different DCs with standalone Splunk ENT installed working as indexers and no replication for security reasons.
Need to configure a SH to searchacross different DCs? Is this a p...