Hello I am having Splunk Enterprise 6.5.1. Now there is a task to add 2 more indexers to the Indexer cluster(6 Indexers).
Please guide me on the same. I read few posts and documentation, so before proceeding I wanted to clear few doubts as listed below:
Do I need to touch the SearchFactor & ReplicationFactor (currently SF is 2 and RF is 3). If yes, then how to calculate it.
Probably I need to add the indexer details in the outputs.conf
Referring to Apps(outputs.conf). We have deployment server in place, so is there a need for deploymentclient.conf in the 2 new indexers and do I need to add the indexers details in the serverclass.conf.
How to enable indexer clustering on the new indexer and join the indexer to the master (peer node configuration). what are the exact steps for configuring.
Couple of Indexes exists in the current Indexers, so do I need to enable anything to make the Indexes balanced across new indexers as well.
Also detailed steps on the same will be definitely helpful for me and others. Thank you.
... View more