Getting Data In

How do you make a Search Head talk to an Indexer?

proletariat99
Communicator

Yeah, I realize this is a really ridiculous question, but I just can't seem to find the answer -- which I assume is really simple -- in splunk docs.

I have a single search head and a single indexer and I'm trying to get the search head to use the data from the indexer. Could someone please tell me in really simple terms what I need to do to access the data on the indexer from the search head?

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi proletariat99,

How about the docs http://docs.splunk.com/Documentation/Splunk/6.2.1/DistSearch/Configuredistributedsearch where you get multiple ways to do it.

cheers, MuS

proletariat99
Communicator

Thanks man. The keywords I was missing was "Distributed Search." My google fu was all jacked up.

ChrisG
Splunk Employee
Splunk Employee

We have added some explanataion and a cross-reference in the Search Manual to help people find the right content: http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Whatsinthismanual Sorry you had this trouble!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...