Hi,
I am wondering if one Search Head Cluster can searchacrossmultipleIndexerClusters.
I have found this doc http://docs.splunk.com/Documentation/Splunk/6.3.3/Indexer/Configuremulti-clusters...
A standalone SH had 2 multipleindexerclusters configured as per the docs below, which has been working well a while until I added 3rd cluster.
https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer...
Hey Splunkers! We have multiple IDX/SH clusters that are peered based on regulatory/compliance/operational reasons. We have a specific SHC that we would like to de-peer from an older IDX cluster. Index...
...niversal forwarders pushing data to an indexer / search server. If I wanted to consider high availability options within a single site, I might want to cluster the indexers, but as I only have two s...
We have a cluster master managing 2 indexers where we can push our indexes.conf in master apps, we have a single search head ( this is lab env), and multiple forwarders. When creating an app to d...
...ull data across sites. I looked at affinity (but that is multisite only) and distributed search (but that is non-cluster only). Is it possible to restrict my SearchHead1 to only searchIndexer1?
I have 6 different DCs with standalone Splunk ENT installed working as indexers and no replication for security reasons.
Need to configure a SH to searchacross different DCs? Is this a p...
...ingle site indexerclustering with full redundancy between both indexers, as well as decreased search time (spreading a searchacrossmultipleindexers). From what I'm reading here we must identify a...
Hey,
I am thinking of having 2 indexerclusters in my environment:
1. “Raw data” cluster, which receives data from windows event forwarders & other “external” connectors.
2. Summary cluster...
...cluster installation (let's say 4 indexers and 2 search-heads) which are configured to use (RootCA->Intermediate1) chain for cert verification and the servers just present the "final" cert w...