https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Peer-Restart/m-p/87554#M3185 <P>Correct, if a search peer goes offline you have a distinct possibility that your result set will be incomplete. If you only have a few indexers, you could monitor how many searches are running and restart when the system is quiet. Unfortunately if you have as many saved scheduled searches as I do, that is never. Hope this helps. </P> Thu, 02 Feb 2012 15:23:14 GMT pete42 2012-02-02T15:23:14Z https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Peer-Restart/m-p/87553#M3184 <P>Greetz,</P> <P>Is it possible to stop/start or restart a search peer while it is handling a search request<BR /> from a search head and have the search still complete?</P> <P>Is there any way to signal to the head to "hold on" or something?</P> <P>Do I assume the distsearch continues over the available splunk_servers<BR /> but results will be incomplete from the restarted peer?</P> <P>Thanks.</P> Thu, 06 Oct 2011 16:20:34 GMT https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Peer-Restart/m-p/87553#M3184 ephemeric 2011-10-06T16:20:34Z https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Peer-Restart/m-p/87554#M3185 <P>Correct, if a search peer goes offline you have a distinct possibility that your result set will be incomplete. If you only have a few indexers, you could monitor how many searches are running and restart when the system is quiet. Unfortunately if you have as many saved scheduled searches as I do, that is never. Hope this helps. </P> Thu, 02 Feb 2012 15:23:14 GMT https://community.splunk.com/t5/Deployment-Architecture/Distributed-Search-Peer-Restart/m-p/87554#M3185 pete42 2012-02-02T15:23:14Z