Splunk Search

what is difference between if search head fetching data from stand alone indexer and index clusterding environment

lksridhar
Explorer

Hi Folks,

what is difference between if search head fetching data from stand alone indexer and index clustering environment. could you please explain how serach will work on both the setup.

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

hi lksridhar,
there are many differences between stand alone and clustered indexers.

From the Search Head point of view, the main difference is that there is another system (Master Node) that tells the Search Head where to find data (see http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Basicclusterarchitecture)

From the configuration point of view there's a difference because to configure search peers:
- in stand alone indexer you use [Settings -- Forwarding and Receiving],
- instead for clustered environments you use [Settings -- Indexers Cluster]

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

hi lksridhar,
there are many differences between stand alone and clustered indexers.

From the Search Head point of view, the main difference is that there is another system (Master Node) that tells the Search Head where to find data (see http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Basicclusterarchitecture)

From the configuration point of view there's a difference because to configure search peers:
- in stand alone indexer you use [Settings -- Forwarding and Receiving],
- instead for clustered environments you use [Settings -- Indexers Cluster]

Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...