I recently change the name of two of my indexers to match the name on the third. Now the Splunk_SA_CIM searches that were turned on for acceleration are only running on the indexer that was not changed.
I looked for some kind of lookup file or some kind of module that was installed on the one but not the other two but I was unable to ID the difference.
Any help would be appreciated.
↧