https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282588#M10698 <P>You are right. Unfortunately current Splunk does not have such configurations. How about binding the two interfaces to one? <BR /> Something like the following doc would help to try bonding NICs <BR /> <A href="http://www.cyberciti.biz/tips/linux-bond-or-team-multiple-network-interfaces-nic-into-single-interface.html">http://www.cyberciti.biz/tips/linux-bond-or-team-multiple-network-interfaces-nic-into-single-interface.html</A></P> Thu, 28 Jul 2016 02:36:31 GMT Masa 2016-07-28T02:36:31Z https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282587#M10697 <P>Hi,</P> <P>A little background regarding my question: I have a cluster of three indexers with 4 NICs each. I have a working stable indexer cluster with just 1 interface doing everything by default (input from forwarders, data replication and comm. with master, and other house keeping stuff).<BR /> Since I had couple of unused NICs, I wanted to dedicate them solely for replication purposes, so I connected indexers to each other with dedicated cable on dedicated interfaces. </P> <P>For ex: indxr1 is connected to indxr2 on eno2 and connected to indxr3 on eno3 with dedicated ethernet cables.<BR /> Similarly indrx2 is connected with other two indexers on dedicated interfaces (eno2, eno3).<BR /> Hence I ended up with having two IP addresses on which each indexer can listen for replicated data (one from each indexer) on dedicated cable.</P> <P>Therefore my question is, how can I configure two IPs to accept replication data from other two indexers?<BR /> I know about the setting: register_replication_address = in server.conf, but I think it doesn't work for more than one IP (plz correct me if I am wrong).<BR /> Also, I believe I would need to specify the replication ports for those two listening interfaces as well, so how do I specify them as well? <BR /> Again, I am aware of the setting <CODE>[replication_port://]</CODE> stanza in server.conf, but will it allow me to specify multiple listening ports as well?</P> <P>Lastly, is it even possible to do above (using two diff. interfaces for replication on same slave)?</P> <P>Any help would be appreciated.</P> <P>Thanks,<BR /> Fatema. </P> Tue, 29 Sep 2020 10:23:04 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282587#M10697 fatemabwudel 2020-09-29T10:23:04Z https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282588#M10698 <P>You are right. Unfortunately current Splunk does not have such configurations. How about binding the two interfaces to one? <BR /> Something like the following doc would help to try bonding NICs <BR /> <A href="http://www.cyberciti.biz/tips/linux-bond-or-team-multiple-network-interfaces-nic-into-single-interface.html">http://www.cyberciti.biz/tips/linux-bond-or-team-multiple-network-interfaces-nic-into-single-interface.html</A></P> Thu, 28 Jul 2016 02:36:31 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282588#M10698 Masa 2016-07-28T02:36:31Z https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282589#M10699 <P>Thanks Masa, for confirming on this. I will look into how to bond the two interfaces and use it, thanks for providing a reference link.</P> <P>Fatema.</P> Thu, 28 Jul 2016 15:52:12 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-use-multiple-interfaces-NICs-for-data-replication-on/m-p/282589#M10699 fatemabwudel 2016-07-28T15:52:12Z