Splunk Enterprise Security

Can multiple search head clusters connected to the same index use port 8080?

spectrum2035
Explorer

Hello,

Currently we have Single Search Head Cluster with Enterprise Security and single Indexer Cluster. As part of the platform uplift, we would like to introduce a new Search Head Cluster (with no ES) and it will be connected to the same Indexer Cluster.

Currently we are using port 8080 for the SHC communication, can we use the same port for the new SHC as well?
All (old and new SHC) are on the same subnet.

0 Karma

amitm05
Builder

yes you can

spectrum2035
Explorer

Thanks Amitm05. I will test the deployment and will accept your answer.

0 Karma

amitm05
Builder

Alright. Sure

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...