Installation

How to undo integration of SHC with multisite indexer cluster?

gkas99
Explorer

As part of deployment rollback, how do we undo integrating SHC with multisite indexer cluster done with following command from this instruction - https://docs.splunk.com/Documentation/Splunk/9.0.1/DistSearch/SHCandindexercluster#Configure_members ?

 

 

splunk edit cluster-config -mode searchhead -site site0 -manager_uri https://10.152.31.202:8089 -secret newsecret123 -auth login:password 

splunk restart

 

 

 

 

Labels (2)
0 Karma
1 Solution

chaker
Contributor

Hi @gkas99 

Do you want to revert to single site or distributed search?

All config for SHC is found under the [clustering] stanza in server.conf on each SH. You could open server.conf, remove the config for clustering and restart. This will give you a blank slate to configre the SH however you like.

If you want to go back to single site, the command above you provided will work, just remove the -site reference.

View solution in original post

chaker
Contributor

Hi @gkas99 

Do you want to revert to single site or distributed search?

All config for SHC is found under the [clustering] stanza in server.conf on each SH. You could open server.conf, remove the config for clustering and restart. This will give you a blank slate to configre the SH however you like.

If you want to go back to single site, the command above you provided will work, just remove the -site reference.

Get Updates on the Splunk Community!

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...