https://community.splunk.com/t5/Deployment-Architecture/Multisite-DAG-Exchange-2010/m-p/32581#M892 <P>We have a multisite DAG and Splunk seems to treat 2 sites of the DAG as different clusters. Under Operations&gt;Systems&gt;Clustering it displays primary site with 3 Exchange servers in DAG as a single DAG cluster and the DR site as a seperate cluster. Is there a way to combine the 2 clusters into 1? </P> Thu, 14 Feb 2013 15:48:59 GMT zivrivkis 2013-02-14T15:48:59Z https://community.splunk.com/t5/Deployment-Architecture/Multisite-DAG-Exchange-2010/m-p/32581#M892 <P>We have a multisite DAG and Splunk seems to treat 2 sites of the DAG as different clusters. Under Operations&gt;Systems&gt;Clustering it displays primary site with 3 Exchange servers in DAG as a single DAG cluster and the DR site as a seperate cluster. Is there a way to combine the 2 clusters into 1? </P> Thu, 14 Feb 2013 15:48:59 GMT https://community.splunk.com/t5/Deployment-Architecture/Multisite-DAG-Exchange-2010/m-p/32581#M892 zivrivkis 2013-02-14T15:48:59Z https://community.splunk.com/t5/Deployment-Architecture/Multisite-DAG-Exchange-2010/m-p/32582#M893 <P>This is because exchange 2010 treats this as two separate clusters within the topology. You will need to alter the underlying searches to create custom segmentation.</P> Thu, 14 Feb 2013 16:27:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Multisite-DAG-Exchange-2010/m-p/32582#M893 ahall_splunk 2013-02-14T16:27:19Z