Hello, I would like to merge 2 index clusters. Context 2 indexer clusters 1 search head cluster Objectives Add new indexers to cluster B. Move data from cluster A to cluster B. Remove cluster A. Constraint Keep service interruptions to a minimum. What do you think of this process: Before starting Make sure the clusters have same Splunk version. Make sure the clusters have same configuration. Make sure volumes B can absorb indexes A. Make sur common indexes have the same configuration. If not, define their final configuration. Add new peer nodes Install new peer nodes. Add new peer nodes in cluster B. Rebalance data. Add new peer nodes in outputs.conf and restart. Move data Remove peer nodes A from outputs.conf and restart. Move indexes configuration from A to B. Copy peer apps from A to B. Put peer nodes A in manual detention to stop replication from other peer nodes. Add peer nodes A in cluster B. Remove peers node A One indexer at a time: Remove peer node A from cluster B. Wait for all the fixup tasks to complete to get the cluster meet search and factors. Rebalance data. Finally Make sure there is no major issue in the logs. Update diagram and inventory files (spreadsheets, inventory files, lookups, etc.). Update dashboards and reports if necessary. ... View more