Splunk 替换原来的管理节点 CM ( manage node )

1: 背景：

大家知道，Splunk 的indexer  和 search head 都是受 CM （ cluster master ） 管理的，就是我们说的 Splunk 司令部 ：manage node, 现在的背景的在部署 cluster master  的备机，当这个cluster master server crash 后，怎么快速启用新的 CM server.

2: 计划：

  我把计划主要分成三步：

        2.1 Back up the files that the replacement manager needs.

        2.2 Ensure that the peer and search head nodes can find the new manager.

        2.3 Replace the manager.

3: 开始备份：

Back up the files that the replacement manager needs

There are several files and directories that you must backup so that you can later copy them to the replacement manager:

• The manager's server.conf file, which is where the manager cluster settings are stored. You must back up this file whenever you change the manager's