When creating indexers with the Splunk Operator for Kubernetes (SOK) the assumption is search heads will be within K8s. We managed to get our search heads to run outside K8s
The full post is available on medium, Splunk Operator for Kubernetes (SOK) — Indexers on K8s, Search Heads outside the K8s cluster, and also available as a Splunk Lantern article