Splunk Search

Configure Search Head Cluster Peers to search a single indexer vs. an indexer cluster 6.2.5?

lisaac
Path Finder

I have setup a 6.2.5 SH cluster. The SH cluster consists of 3 SHs and an additional host functioning as a SH deployer. I have successfully configured the SH cluster to communicate with an index cluster. What is the best way to add a single non-clustered indexer to a SH cluster? It looks like I would need to use the CLI and run the command splunk add search-server on each of the SH cluster members. Any thoughts from anyone?

Tags (3)
0 Karma

lguinn2
Legend

Yes, that is how I would do it!

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...