![]() ![]() To search across multiple indexer clusters, see "Search across multiple indexer clusters". You can, however, use that page to view the list of search peers. ![]() How the Distributed Search page works with indexer clustersĭo not use the Distributed Search page on Splunk Web to configure a search head in an indexer cluster or to add peers to the cluster. For information on how to configure mounted bundles, read the "Mounted knowledge bundle replication" in the Distributed Search manual. For information on how to use the manager node to manage peer configurations, read "Update common peer configurations and apps" in this manual. For indexer clusters, you should use the manager node to distribute this file to the peers. However, to implement mounted bundles, you need to distribute a small nf file to the search peers. Most nf settings are valid only for search heads. ![]() Mounted bundles and search peer configurations The search head in an indexer cluster automatically pushes its public key to the search peers. However, you do not need to distribute the keys manually. A search head in an indexer cluster ignores these attributes:Īs when running against non-clustered indexers, search head access to search peers is controlled through public key authentication. You do not perform any configuration in nf to enable automatic discovery.Ī few attributes in nf are not valid for search heads in indexer clusters. The main difference is that, for indexer clusters, search heads and search peers are automatically connected to each other as part of the cluster enablement process. Most settings and capabilities are the same for search heads running on an indexer cluster and those running against non-clustered indexers. Search heads running on an indexer cluster compared to search heads running against non-clustered indexers That book focuses on environments with non-clustered indexers, but you configure most advanced search head features in the same way when working with indexer clusters, except as described here. To implement some advanced features of distributed search, such as mounted bundles, you must edit nf on the search head.įor instructions on how to perform advanced configuration, read the Distributed Search manual. See "Configure the search head with the CLI".įor additions and differences when configuring multisite search heads, see "Implement search affinity in a multisite indexer cluster" and "Configure multisite indexer clusters with nf". See "Configure the search head with the dashboard".
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |