Manage clusters under systemd
When managing an indexer cluster under systemd:
- You must use the
sudocommand to start, stop, and restart the cluster manager node or individual peer nodes usingsplunk start|stop|restartcommands. - You do not need
sudoto perform a rolling restart using thesplunk rolling-restart cluster-peerscommand, or to take a peer offline using thesplunk offlinecommand.
When managing a search head cluster under systemd:
- You must use the
sudocommand to start, stop, and restart cluster members usingsplunk start|stop|restartcommands. - You do not need
sudoto perform a rolling restart using thesplunk rolling-restart shcluster-memberscommand, or to remove a cluster member using thesplunk remove shcluster-memberscommand.