Hi, all.
I am looking to add an indexer to my existing environment that consists of 1 dedicated indexer and 1 dedicated search head. I do not wish to enable clustering as I simply want to introduce load balancing to indexer function. Are there instructions available on how to add a standalone indexer to an existing deployment? Is the process as simple as:
1. Install Splunk on new instance, point to existing license master
2. Copy etc/system/local directory from existing indexer to new indexer - this should create any custom props, transforms, inputs, index configurations on new server
3. Copy etc/apps from existing indexer to new indexer
4. Configure ouput.conf files on forwarders to load balance
5. Add new indexer as search peer on search head
Thank you
James
↧