https://community.splunk.com/t5/Deployment-Architecture/What-is-the-recommended-replication-factor-configuration-for-a/m-p/208502#M7821 <P>I have a multisite indexer clustering environment with 2 Indexers in Site1 and 1 Indexer in Site2. What is the recommended Replication factor configuration with different numbers of indexers in different sites? Everything I have read is based on an equal number of indexers in each site. </P> Thu, 18 Feb 2016 21:10:30 GMT gduggan1 2016-02-18T21:10:30Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-recommended-replication-factor-configuration-for-a/m-p/208502#M7821 <P>I have a multisite indexer clustering environment with 2 Indexers in Site1 and 1 Indexer in Site2. What is the recommended Replication factor configuration with different numbers of indexers in different sites? Everything I have read is based on an equal number of indexers in each site. </P> Thu, 18 Feb 2016 21:10:30 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-recommended-replication-factor-configuration-for-a/m-p/208502#M7821 gduggan1 2016-02-18T21:10:30Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-recommended-replication-factor-configuration-for-a/m-p/208503#M7822 <P>So this scenario is a little unique, but not uncommon. This kind of scenario is typically trying to fulfill a DR scenario where having one Indexer at a different site will cover the DR case where site1 disappears..</P> <P>Here we are assuming that we need to have RF/SF of 3.. </P> <PRE><CODE>available_sites=site1,site2 site_replication_factor=origin:1,site1:2,site2:1,total:3 site_search_factor=origin:1,site1:2,site2:1,total:3 </CODE></PRE> <P>There is an issue with this though, that having a RF/SF 3:3 does use more disk space then say a RF/SF 3:2. See docs @ : <A href="http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Sitereplicationfactor">http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Sitereplicationfactor</A> </P> Thu, 18 Feb 2016 21:41:18 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-recommended-replication-factor-configuration-for-a/m-p/208503#M7822 esix_splunk 2016-02-18T21:41:18Z