Getting Data In

How to Not apply cluster-bundle

Ed_Alias
Path Finder

Hi,

i am installing two new indexers for test, as test indexers they have very small disks.

As clustermember they get indexes.conf from the cluster-bundle, where _internal is set to keep logs for a year.

_internal configuration is made for my production splunk servers, how can i bypass the cluster bundle on the tests servers ?

Regards,
Edouard Alias

0 Karma

Ed_Alias
Path Finder

Hi,

believed slave apps is prioritary to system/local folder..

i thinks i'll have to let them out of cluster and use my master only as licence server ?

0 Karma

muebel
SplunkTrust
SplunkTrust

good point, I updated the answer to clarify how this could work.

Yeah, you can still point the indexers to the master as your license server.

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi Ed_alias, If your cluster apps are defining indexes in default only, I believe that you could put config into $SPLUNKHOME/etc/system/local/indexes.conf to override anything the cluster master puts out, but you'll want to be very careful about this. See : http://docs.splunk.com/Documentation/Splunk/6.1/admin/Wheretofindtheconfigurationfiles for more info on config precedence.

Alternatively, you could not add the indexers to the cluster, and leave them as independent indexers.

Let me know if this helps! 😄

0 Karma

Ed_Alias
Path Finder

i just need a differant config for _internal index on the two indexing tests servers...

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...