Indexing cluster

For each of the indexers (peer nodes) in the indexing cluster, perform the following steps in Splunk Web:

1. Settings | Indexer clustering—click Enable indexer clustering
2. Click Peer node and Next

In the Peer node configuration screen, complete the following fields (examples provided):

1. Master URI: https://172.31.18.102:8089
2. Peer replication port: 8080
3. Security key: !Sp1unkCM!
4. Click Enable peer node

This creates the following entries in the /opt/splunk/etc/system/local/server.conf file:

[replication_port://8080]

[clustering]
master_uri = https://172.31.18.102:8089
mode = slave
pass4SymmKey = $1$bIw25oPe24yYuqk=