Monitoring Splunk Enterprise

Set cluster labels

This topic is a step in the process of setting up the distributed management console for a Splunk Enterprise deployment. See “About the distributed management console" above.

Set labels on your clusters (both indexer clusters and search head clusters) for the DMC to identify instances associated with them. This identification allows the DMC to populate the indexer clustering and search head clustering dashboards.

During cluster deployment

It is recommended that you set the label during initial deployment of the cluster. If necessary, you can set or change the label later.

To set the indexer cluster label during deployment, see "Enable the indexer cluster master node."

To set the search head cluster label during deployment, see "Deploy a search head cluster."

After cluster deployment

If you are deploying a new cluster, we recommend that you set cluster labels during the deployment process. But if your cluster is already deployed, for example if you are upgrading a cluster, set cluster labels at the beginning of the DMC setup, according to these tables.

Splunk Enterprise version, cluster type	Where?	How?
6.3.0+ indexer cluster	On cluster master	See below
Pre-6.3.0 indexer cluster	On DMC setup page	Set label for all instances in cluster

To set a 6.3.0 or later indexer cluster label after deployment, see "Configure the master with the dashboard" or use the following CLI command from the cluster master:

splunk edit cluster-config -cluster_label <CLUSTER LABEL>

Splunk Enterprise version, cluster type	Where?	How?
6.3.0+ search head cluster members	On any SHC member	See below
6.3.0+ search head cluster deployer	On DMC setup page	Set label for deployer instance
Pre-6.3.0 search head cluster	On DMC setup page	Set label for all instances in cluster

To set a 6.3.0 or later search head cluster label after deployment, see "Configure the search head cluster" or use the following CLI command from any cluster member:

splunk edit shcluster-config -shcluster_label <CLUSTER LABEL>

Whichever method you use to edit cluster labels, be sure to go to the DMC setup page and click Apply Changes to update the DMC asset table.

About the DMC setup page

The DMC setup page in Splunk Web is at Distributed Management Console > Settings > General Setup.

After editing cluster labels, be sure to click Apply Changes at the top right.

Next step

To continue setting up your DMC in a distributed deployment, see Add instances as search peers.