My current splunk (standalone) index/search host has a bunch of proc/mem but is low on disk. I have two other servers with average proc/mem but a ton of disk that I'd like to use as cluster peers.
I noticed in the first step of clustering configuration, you have the choice of three roles: master, search head or peer. That's making me think its not possible to have a master also be a search head.
I'd like to move the standalone (big proc/mem) over to be a master as well as search. Possible?
... View more