My Splunk experiment requirement is to configure an instance which acts like both forwarder and search head.
and indexer clustering should get configured automatically based on fqdn etc...
How to do the indexer clustering with one master and many peer indexers automatically configure through the script or any other way through Splunk yaml file also forwarder and indexer side work is autoload balanced.
If someone can share the clear details of this auto deployment would be helpful with a pointer to the right script/config file.
... View more