<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Raft State Machine in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702827#M28772</link>
    <description>&lt;P&gt;Don't understand the question &lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;/P&gt;&lt;P&gt;I have a non clustered Indexing infrastructure (8 standalone indexers).&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/187813"&gt;@sainag_splunk&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;I don't think that required.&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;I decide what's required &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;and i want the SHC to replicate distsearch.conf &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;/P&gt;&lt;P&gt;My question was another, leave &lt;STRONG&gt;replicate_search_peers&lt;/STRONG&gt; away,&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;FONT size="5" color="#FF0000"&gt;What changes in a SHC &lt;/FONT&gt;by setting "&lt;STRONG&gt;disabled = true or false&lt;/STRONG&gt;"? By default is &lt;EM&gt;true&lt;/EM&gt;.&lt;BR /&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;</description>
    <pubDate>Fri, 25 Oct 2024 15:35:11 GMT</pubDate>
    <dc:creator>verbal_666</dc:creator>
    <dc:date>2024-10-25T15:35:11Z</dc:date>
    <item>
      <title>Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702767#M28758</link>
      <description>&lt;P&gt;Hi.&lt;BR /&gt;I do not understand well the SHC config,&lt;/P&gt;&lt;PRE&gt;[raft_statemachine]

disabled = &amp;lt;boolean&amp;gt;
* Set to true to disable the raft statemachine.
* This feature requires search head clustering to be enabled.
* Any consensus replication among search heads uses this feature.
* Default: true

replicate_search_peers = &amp;lt;boolean&amp;gt;
* Add/remove search-server request is applied on all members
  of a search head cluster, when this value to set to true.
* Requires a healthy search head cluster with a captain.&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;What changes in a SHC by setting "&lt;STRONG&gt;disabled = true or false&lt;/STRONG&gt;"? By default is &lt;EM&gt;true&lt;/EM&gt;.&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;"&lt;STRONG&gt;replicate_search_peers = true&lt;/STRONG&gt;" works only if disabled is &lt;EM&gt;false&lt;/EM&gt;.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;What does setting this to &lt;EM&gt;true&lt;/EM&gt; or &lt;EM&gt;false&lt;/EM&gt; do to the cluster?&lt;/P&gt;</description>
      <pubDate>Fri, 25 Oct 2024 06:24:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702767#M28758</guid>
      <dc:creator>verbal_666</dc:creator>
      <dc:date>2024-10-25T06:24:26Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702818#M28771</link>
      <description>&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/28550"&gt;@verbal_666&lt;/a&gt;&amp;nbsp;May I know the reason you are tryin to update this?&lt;BR /&gt;&lt;BR /&gt;Basically replicate search peers is when you want to&amp;nbsp; add a non-clustered indexer via the GUI, replicate that to your other SHC peers, I don't think that required.&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV class=""&gt;Refer:&amp;nbsp;&lt;A href="https://docs.splunk.com/Documentation/Splunk/9.2.0/DistSearch/Connectclustersearchheadstosearchpeers#Replicate_the_search_peers_across_the_cluster" target="_blank" rel="noopener"&gt;https://docs.splunk.com/Documentation/Splunk/9.2.0/DistSearch/Connectclustersearchheadstosearchpeers#Replicate_the_search_peers_across_the_cluster&lt;/A&gt;&lt;/DIV&gt;&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV class=""&gt;I have only seen&amp;nbsp;&amp;nbsp;&lt;STRONG&gt;replicate_search_peers&lt;/STRONG&gt;&lt;SPAN&gt;&lt;SPAN&gt;&amp;nbsp;is used where you have search head cluster is in use with no index clustering, so if you want to search the non clustered indexers, its set to &lt;STRONG&gt;false&lt;/STRONG&gt;.&amp;nbsp; If you want it to replicate its set to &lt;STRONG&gt;true&lt;/STRONG&gt;.&lt;BR /&gt;&lt;BR /&gt;replicate_search_peers = true&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;UL class=""&gt;&lt;LI&gt;Only works if disabled = false&lt;/LI&gt;&lt;LI&gt;Automatically copies search peer connections to all SHC members&lt;/LI&gt;&lt;LI&gt;Most useful when connecting SHC to non-clustered indexers&lt;/LI&gt;&lt;/UL&gt;&lt;SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;If this helps., Please Upvote&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
      <pubDate>Fri, 25 Oct 2024 14:13:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702818#M28771</guid>
      <dc:creator>sainag_splunk</dc:creator>
      <dc:date>2024-10-25T14:13:51Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702827#M28772</link>
      <description>&lt;P&gt;Don't understand the question &lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":face_with_rolling_eyes:"&gt;🙄&lt;/span&gt;&lt;/P&gt;&lt;P&gt;I have a non clustered Indexing infrastructure (8 standalone indexers).&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/187813"&gt;@sainag_splunk&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;&lt;DIV class=""&gt;I don't think that required.&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;I decide what's required &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;and i want the SHC to replicate distsearch.conf &lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":winking_face:"&gt;😉&lt;/span&gt;&lt;/P&gt;&lt;P&gt;My question was another, leave &lt;STRONG&gt;replicate_search_peers&lt;/STRONG&gt; away,&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;FONT size="5" color="#FF0000"&gt;What changes in a SHC &lt;/FONT&gt;by setting "&lt;STRONG&gt;disabled = true or false&lt;/STRONG&gt;"? By default is &lt;EM&gt;true&lt;/EM&gt;.&lt;BR /&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;</description>
      <pubDate>Fri, 25 Oct 2024 15:35:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702827#M28772</guid>
      <dc:creator>verbal_666</dc:creator>
      <dc:date>2024-10-25T15:35:11Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702833#M28774</link>
      <description>&lt;P&gt;The disabled setting in SHC only impacts captain election and member roster management.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 25 Oct 2024 18:06:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702833#M28774</guid>
      <dc:creator>sainag_splunk</dc:creator>
      <dc:date>2024-10-25T18:06:49Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702850#M28775</link>
      <description>&lt;P&gt;&lt;A href="https://en.m.wikipedia.org/wiki/Raft_(algorithm" target="_blank"&gt;https://en.m.wikipedia.org/wiki/Raft_(algorithm&lt;/A&gt;)&lt;/P&gt;&lt;P&gt;Without raft algorithm your captain election will not work properly. You might get away with static captain but it's not fault tolerant so if you lose your static captain your SHC will more or less fall apart.&lt;/P&gt;</description>
      <pubDate>Sat, 26 Oct 2024 08:09:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702850#M28775</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2024-10-26T08:09:09Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702851#M28776</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/187813"&gt;@sainag_splunk&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;P&gt;The disabled setting in SHC only impacts captain election and member roster management.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;Ok, so it's minimal, and has ne real impact of cluster operativity &lt;span class="lia-unicode-emoji" title=":thumbs_up:"&gt;👍&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Thanks &lt;span class="lia-unicode-emoji" title=":thumbs_up:"&gt;👍&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 26 Oct 2024 08:38:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702851#M28776</guid>
      <dc:creator>verbal_666</dc:creator>
      <dc:date>2024-10-26T08:38:26Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702852#M28777</link>
      <description>&lt;P&gt;I neved had problems with Captain Election, both with&lt;/P&gt;&lt;PRE&gt;[raft_statemachine]
disabled = true&lt;BR /&gt;disabled = false&lt;/PRE&gt;&lt;P&gt;🤷‍&lt;/P&gt;</description>
      <pubDate>Sat, 26 Oct 2024 08:43:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702852#M28777</guid>
      <dc:creator>verbal_666</dc:creator>
      <dc:date>2024-10-26T08:43:07Z</dc:date>
    </item>
    <item>
      <title>Re: Raft State Machine</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702853#M28778</link>
      <description>&lt;P&gt;It's not the only factor in captain election. So just because you have raft enabled doesn't mean that your election will work properly.&lt;/P&gt;</description>
      <pubDate>Sat, 26 Oct 2024 09:30:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Raft-State-Machine/m-p/702853#M28778</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2024-10-26T09:30:53Z</dc:date>
    </item>
  </channel>
</rss>

