Deployment Architecture

Indexer Discovery on Heavy Forwarder

kevingunn
New Member

Is it possible to enable indexerDiscovery on a Heavy Forwarder? I followed instructions here (http://docs.splunk.com/Documentation/Splunk/6.6.2/Indexer/indexerdiscovery), but haven't been able to get it to work. If I check https://localhost:8000/services/server/info on a heavy forwarder, it just lists the server role as kv_store, which to me tells me the indexerDiscovery is not working. If I manually add indexer peers as a forwarder server, the server role is correctly updated to reflect heavyweight_forwarder.

I don't see anything in the logs that points to any issues. Is there a way to check the status of a heavy forwarder or the status of indexer discovery (IE: list indexers that were discovered)?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...