Hi All, We are migrating SHC members from old to new datacenter. There are total 3 members as a part of SHC. Please tell us which is the best approach to follow. 1. Add 1 new node to the SHC, have...
...tem Type"
(where viewby is selected value from dropdown. Now the applicable values for viewby in the drop down are "type1", "type2", "type3". In the column header, I want to display "Type 1" f...
I have 2 nodes in my Search Head cluster and want to disable the Search head Clustering fully. I have a deployer also, which I used during configuration of Search Head Cluster.
In the d...
When I used to manually created indexes on prem, I would create a record in index.conf for Indexers and a separate one in indexes.conf for Search heads. The documentation calls it a "Search Head V...
We have a single Search Head Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a Search Head c...
Hi there. I'm relatively new to searching in Splunk so I can't sometimes get my head wrapped up around some Splunk concepts 😉 Anyway. I'm trying to achieve something and I can't seem to be a...
...onnection Refused for peer=X ^ Which seems like the search heads are sending queries or still have an established connection with the peer. I would expect the search head to know that a peer is down and not c...
How can I remove a search head cluster member when that member is down? Power outage at a location took down two of our search head cluster members for a week. I cant push bundles from the D...
...an you someone explain me the step by step procedure for integrating SAML in Search head cluster.
https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/SAMLSHC