Which of the following CLI commands removes a search peer from Distributed Search?

To remove a search peer from a search head in a distributed search environment using the CLI, Splunk provides the splunk remove search-server command. This command is executed on the search head and removes the specified search peer from its configuration.

The correct syntax for this command is:

splunk remove search-server -auth < user > : < password > < host > : < port >

Where:

< user > : < password > are the credentials for the search head.

< host > : < port > specifies the management port of the search peer to be removed.

For example:

bash

CopyEdit

splunk remove search-server -auth admin:password 123.45.67.89:8089

This command removes the search peer from the search head ' s configuration. It ' s important to note that this action does not affect the search peer itself; it merely removes the association from the search head.