Getting Data In

How to add parallelIngestionPipelines to server.conf in an indexer cluster?

rsathish47
Contributor

Hi All,

We have an indexer cluster and cluster master. we need to add the parameter below in the indexer cluster server.conf file. Can you please let me know where I need to add this and how to push?

[general]
parallelIngestionPipelines = 2

Do we need to add it in the cluster master server.conf file? and then Splunk apply cluster-bundle
OR
I need to add it the individual indexer and restart the server?

Thanks
Sathish Rangan

0 Karma
1 Solution

maraman_splunk
Splunk Employee
Splunk Employee

Hi

you should avoid any manual modification directly on indexers
To modify a setting, you need to push it via the cluster master so it's consistent between cluster nodes.
the cluster master server.conf define the cluster master settings, not what's pushed.

What's pushed will be under etc/master-apps
in it you have 2 choices :
1) go in _cluster/local -> create a server.conf here and use this setting

2) create a configuration app with the file in it.
(btw you should already have put your TA here as they may contain index time configuration)

(go with choice 1 if you don't know how to create a configuration app)

then run on the cluster master splunk apply cluster-bundle

the cluster master will initiate a rolling restart if necessary

View solution in original post

maraman_splunk
Splunk Employee
Splunk Employee

Hi

you should avoid any manual modification directly on indexers
To modify a setting, you need to push it via the cluster master so it's consistent between cluster nodes.
the cluster master server.conf define the cluster master settings, not what's pushed.

What's pushed will be under etc/master-apps
in it you have 2 choices :
1) go in _cluster/local -> create a server.conf here and use this setting

2) create a configuration app with the file in it.
(btw you should already have put your TA here as they may contain index time configuration)

(go with choice 1 if you don't know how to create a configuration app)

then run on the cluster master splunk apply cluster-bundle

the cluster master will initiate a rolling restart if necessary

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...