Hello Splunk lovers!
I have problem on Splunk Cluster.
I had 3 SH and 3 Indexers.
On indexer-1 installed deployer, indexer managament and cluster master.
On cluster master i see indexer-1 search head and indexer too. B
but its should not be search head, should be indexer only
So, wtf and how can i set him only indexer?
thanks you for help!
The Cluster Manager (CM) must not be a member of the cluster - it must be a separate instance.
Similarly, the deployer should be a separate instance. However, on a small environment such as this, the CM and deployer can be on the same instance.
Make sure each indexer is correctly added to the cluster. See https://docs.splunk.com/Documentation/Splunk/9.0.4/Indexer/Addclusterpeer
The Cluster Manager (CM) must not be a member of the cluster - it must be a separate instance.
Similarly, the deployer should be a separate instance. However, on a small environment such as this, the CM and deployer can be on the same instance.
Make sure each indexer is correctly added to the cluster. See https://docs.splunk.com/Documentation/Splunk/9.0.4/Indexer/Addclusterpeer