Splunk Search

Multi indexer distributed search

mcgrathd
New Member

I would like to index data separately using two indexers and have distributed search capability. I read here ( http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Whatisdistributedsearch
) in the documentation that a unique license key is required for each indexer for distributed searches. I am using 4.3 and would rather use a license master with an enterprise license utilized by my indexers. Is the documentation correct for version 4.3?

0 Karma

Brian_Osburn
Builder

That documentation doesn't seem correct. It doesn't need a unique key (it did pre-license master).

I'll bring it to someone's attention.

Thanks!

Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...