Deployment Architecture

integrate standalone server into index cluster for search only

andymalato
Engager

Hello All,

We currently have a single standalone deployment (index and search head on single system).  In addition, we have deployed a new index cluster (3 nodes) and single search head.  We will be migrating all of our forwarders to point to the newly deployed cluster.  However, we still have data on the single deployment server that has not aged out yet.   Does anyone know if it is possible to configure our search head to also search the old standalone Splunk environment ?  

 

Thanks.

 

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible.  Add the standalone instance as a search peer to the other search head.  The new SH then will search both the cluster and the standalone.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

andymalato
Engager

Thanks, that worked perfectly!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible.  Add the standalone instance as a search peer to the other search head.  The new SH then will search both the cluster and the standalone.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!