is it possible to run both indexer and search head on the same splunk server.
i kind of have only one server in one of my test environments, so was wondering if this was an option as i am having dbconnect on that server.
im unable to add the search peer as itself..
Yes, this is common in small environments and test/dev systems. Install a single instance of Splunk and it will function as both search head and indexer. There is no need to configure distributed search in this case.
Thanks Galloway, but i am not sure why my dbconnect is able to see data in the splunk db connect app ,but its not indexing it then..
any ideas...
Strange, its all working after i reinstalled it..
@jiaqya If your problem is resolved, please accept the answer to help future readers.