...(s), send it/them the search bundle, the searchpeer(s) execute(s) the search, but then what happens?
The search results send back to the SH trough the same connection (what initiate the SH e...
...dx2 My Search on the searchhead: index="mess" When I run the above search I am expecting the searchheadtosend the searchto both the searchpeers, splunk-idx1 and s...
I have a question about searchheads and searchpeers. I have searchheads and searchpeers in each of two datacenters. The plan is to configure the searchpeers (indexers) to receive data from s...
...ranslate to each of the indexers). But what is this genious Splunk Manager Node doing instead : send the IP address of course! Internal one, so to make sure the SearchHead will never be able to reach any peers...
...head tosend the entire replication bundle 50 times an hour.
What is the threshold on blacklisting large lookup files? Do the searchpeers need the lookup files? I thought the lookup files w...
Hi,
we upgraded our Splunk 5.0.9 Test-Cluster to 6.1.3 today (two indexers, one cluster master, one searchhead) and followed all instructions from docs.splunk.com. All Splunk instances are r...
...very minute from each of our 3 searchheads.
The searchpeer in question is in our secondary site (let's say B) to the searchheads (site A), but there are two other searchpeers in the same s...
Environment:
2x heavy forwarders (6.4.1) in a load balanced pool (sitting behind haproxy) and using indexer_discovery
1x cluster master, 3x indexer peers
2x searchheads
Question:
I am r...
...ndex cluster master 6.2.1 1x Cluster peers 6.2.1
When performing a search on a searchhead I get
02-24-2015 14:39:08.539 +1100 WARN ISplunkDispatch - Gave up waiting for the captain to e...
Hi All, may I know how many index master we can add to the searchhead . We currently have 6 and trying to add 7th ? It’s not working out can some one send some document or have experience in same k...