Getting Data In

How to move a summary index from a search head to the indexers?

Glasses
Builder

Hi
I don't have a lot of experience with summary indexes, but the previous admin created some schedule reports and set summary indexing to an index on the local search head box.

I have to decom this physical server and move the searchhead to the cloud, so I will tar it and move it.

But I don't want the summary index - indexing locally to an instance that is a dedicated searchhead...

Please advise how I can configure the summary to send to the indexers (which are non-clustered, autolb).
Thank you

0 Karma
1 Solution

Glasses
Builder

Thank you, one quick follow up,
do I create these confs in system/local or in the search app or launcher app where I find the base schedule searches... not sure which directory to insert those...

Thanks

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...