Hi rphillips [Splunk],
Thanks for your answer..!!
I've tried with the above option , but its ended up with an error when i restarted the splunkd after the config change in the server.conf in the SH.
I've set the mode as searchhead and poll_interval value was 5.
Invalid key in stanza [clustering] in /pkg/splunk/etc/system/default/server.conf, line 397: only valid for mode (value: master or mode=searchhead).
Would you please check and let me know if there are changes needs to be done.
Thank you,
Abi
... View more