topic Re: Clarification on Clustering & Index Replication in Deployment Architecture

Clarification on Clustering & Index Replication

rturk — Tue, 19 Nov 2013 04:45:01 GMT

Hi All,

In reading a recently posted (16 Oct 2013) Splunk blog post "Clustering Optimizations in Splunk 6", the following was mentioned:

In the previous Splunk 5 version, users will not be able to search and
use the cluster until the cluster master ensures that all of the
replication policies are met. In some cases, this might take long time and
users are unnecessarily blocked until then.

Should I take this to mean that in v5, functional Index replication & searchability is only possible when you have n+1 indexers (where n is the index replication factor)? For example, if I have two indexers, and have set an index replication & searchability factor of two, this won't actually work as expected (i.e. full data availability in the event of a single indexer failure).

Any input is appreciated 🙂

Re: Clarification on Clustering & Index Replication

rturk — Wed, 20 Nov 2013 00:50:53 GMT

FYI I have logged a support case for this and will report back with any findings.

Re: Clarification on Clustering & Index Replication

mahamed_splunk — Thu, 21 Nov 2013 19:08:14 GMT

For example, if I have two indexers, and have set an index replication & searchability factor of two, this won't actually work as expected

No, If your replication policy is set to 2 and you have 2 indexers available, then your policy is already met, so users will be able to access and search the data.

Re: Clarification on Clustering & Index Replication

rturk — Thu, 21 Nov 2013 22:20:23 GMT

Hi Mahamed - I understand that if both of my indexers are available it will work, my question concerns the platform behaviour if one indexer has failed (e.g. "work as expected (i.e. full data availability in the event of a single indexer failure)."

Re: Clarification on Clustering & Index Replication

mahamed_splunk — Thu, 21 Nov 2013 22:27:22 GMT

Got it. Even if only one indexer is available, the data will continue to be available and searchable. The optimization the blog post talks about is the order in which we fix indexes and commit generations.

Re: Clarification on Clustering & Index Replication

rashid47010 — Sat, 14 Apr 2018 18:41:20 GMT

Hi
I have two index instances and one seach head
Now i want to configure replication and failover between these teo indexers.
How can i achieve this ?