Giters

splunk / splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add ability to have mutliple serach peers on single searchhead.

sharkannon opened this issue · comments

commented

In splunk enterprise, you are able to define multiple search peers in your server.conf on your searchhead, and then reference them in the master_uri as such:

[clustering]
mode = searchhead
master_uri = clustermaster:prd1,clustermaster:prd2

[clustermaster:prd1]
pass4SymmKey = helloworld
master_uri=https:/cm1:8089

[clustermaster:prd2]
pass4SymmKey = helloworld
master_uri=https://cm2:8089

This appears to be lacking, and as such you can only set up single cluster master peers (w/out setting up a custom server.conf)

It would be nice to be able to do something like this without having to define my own server.conf.