splunk-indexer-cluster-setup
Render, preflight, apply, validate, and operate Splunk Enterprise indexer clusters end-to-end: single-site multi-host bootstrap, multisite bootstrap (per-site explicit factors, site_mappings, search affinity), cluster manager redundancy (active/standby with manager_switchover_mode + LB or DNS), configuration bundle (validate / status / apply / rollback / skip-validation), rolling restart (default 10%, searchable with health checks, searchable forced), fast and enforce-counts peer offline, peer removal from manager list, maintenance mode, single-site to multisite migration, decommission a site, move a peer to a new site, migrate a non-clustered indexer into the cluster, pass4SymmKey rotation, manager DR backup, and forwarder indexer-discovery output snippets. Use when the user asks to bootstrap an indexer cluster, multisite cluster, configure site_replication_factor / site_search_factor, apply or rollback a cluster bundle, perform a rolling restart, take a peer offline, migrate single-site to multisite, or run