I'm reading the docs about sharing summaries between search-heads and I'm a bit puzzled.
The article states: "You can find the GUID for a search head cluster in the [shclustering] stanza of server.conf. If you are running a single instance you can find the GUID in etc/instance.cfg. "
But in my case the only guids I can find are those on single shcluster members in etc/instance.cfg. Of course each one is different. I cannot seem to find a "search head cluster GUID" anywhere.
What am I doing wrong?
In Search Head Cluster, you can find GUID in $SPLUNK_HOME/etc/system/local/server.conf under [shclustering] stanza and parameter name is id
id = <GUID>
* Unique identifier for this cluster as a whole, shared across all cluster
* Default: Splunk software arranges for a unique value to be generated and
shared across all members.
View solution in original post
Argh. I was looking for a guid parameter, not id. That's why I couldn't find it.