Getting Data In

How to remove an indexer peer from an indexer cluster in Splunk 6.1? Getting error "'cluster-peers' is not a valid argument for the 'remove' command"

a212830
Champion

Hi,

I want to remove some legacy indexers from my cluster. I did the ./splunk offline --enforce-counts command, and now I tried the remove cluster command:

./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C

Splunk comes back with:

Command error: 'cluster-peers' is not a valid argument for the 'remove' command.  Please type "splunk help remove" for usage and examples.

Is 6.1 different somehow?

0 Karma

nawazns5038
Builder
 ./splunk remove cluster-peers -peers 20B9E07D-A1F1-4E82-9D08-BC02893B3A8C

Did you perform the command from the cluster master ??

0 Karma

sloshburch
Splunk Employee
Splunk Employee

In this context, you can just turn offline that instance and destroy it. The master will handle the bucket fixing activities to make sure the copies of the data exist elsewhere. Make sure all the indexes have at least a replication factor of 2 otherwise you will lose data that only exists on that host.

This page covers that topic:
http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Whathappenswhenaslavenodegoesdown#When_a_pee...

Notice that in this context, you should run ./splunk offline rather than ./splunk stop.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...