How does Monitoring Console (MC) initially identify the server role(s) of a new Splunk Instance?

 The Monitoring Console (MC) uses a REST endpoint to query the server and determine its role(s) based on the configuration files and processes running on the server. The MC does not rely on manual assignment, distsearch.conf, or default roles to identify the server role(s). References:

: Splunk Documentation: Monitoring Console: Identify roles of Splunk Enterprise instances

: Splunk Documentation: Monitoring Console: How the Monitoring Console identifies instance roles