Can you please provide the documentation for Splunk 6.2 to enable the multisearch head without NAS Share.
Hi, I am not sure what you mean by "the multisearch node." If you are talking about having multiple search heads handle the same set of searches, you are correct: the new search head clustering feature of Splunk Enterprise 6.2 does not require shared storage (unlike the older search head pooling feature).
There is extensive documentation about search head clustering, starting with the topic "About search head clustering" in the Distributed Search manual.
Hi, I am not sure what you mean by "the multisearch node." If you are talking about having multiple search heads handle the same set of searches, you are correct: the new search head clustering feature of Splunk Enterprise 6.2 does not require shared storage (unlike the older search head pooling feature).
There is extensive documentation about search head clustering, starting with the topic "About search head clustering" in the Distributed Search manual.