Hi, all.
I am looking to add an indexer to my existing environment that consists of 1 dedicated indexer and 1 dedicated search head. I do not wish to enable clustering as I simply want to introduce load balancing to indexer function. Are there instructions available on how to add a standalone indexer to an existing deployment? Is the process as simple as:
Install Splunk on new instance, point to existing license master
Copy etc/system/local directory from existing indexer to new indexer - this should create any custom props, transforms, inputs, index configurations on new server
Copy etc/apps from existing indexer to new indexer
Configure ouput.conf files on forwarders to load balance
Add new indexer as search peer on search head
Thank you
James
... View more