Why i use "add forward-server" is work, but "add search-server" failed?
[root@proxy splunkforwarder]# bin/splunk help commands
[skip...]
[command] [objects]
add [exec|forward-server|index|licenser-pools|licenses|monitor|oneshot|
saved-search|search-server|tcp|udp|user]
[root@proxy splunkforwarder]# bin/splunk add forward-server xxx.xxx.xxx.xxx:9001
Added forwarding to: xxx.xxx.xxx.xxx:9001.
[root@proxy splunkforwarder]# bin/splunk add search-server xxx.xxx.xxx.xxx:9001
Command error: The subcommand 'search-server' is not valid for command 'add'.
Data forwarding configuration management tools.
Commands:
enable local-index [-parameter ] ...
disable local-index [-parameter ] ...
display local-index
add [forward-server|search-server] server
remove [forward-server|search-server] server
list [forward-server|search-server]
Objects:
forward-server a Splunk forwarder to forward data to be indexed
search-server a Splunk server to forward searches
local-index a local search index on the Splunk server
[root@proxy splunkforwarder]#
Thanks!
... View more