Hello!!
I would like to know whether SH clusters share Lookups, if so how can be I sure that lookups added from a scheduled search on SH 1 is replicated on SH 2 ? do I need to run the schedule everytime manually on all the server..?
Regards,
David
In a search head cluster, the lookups should be replicated by default unless its disabled manually
See here : http://docs.splunk.com/Documentation/Splunk/6.2.0/DistSearch/HowconfrepoworksinSHC
In a search head cluster, the lookups should be replicated by default unless its disabled manually
See here : http://docs.splunk.com/Documentation/Splunk/6.2.0/DistSearch/HowconfrepoworksinSHC