<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Limit output network bandwidth during peer decommissioning in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524883#M88621</link>
    <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;Thanks a lot for your suggestion!&lt;/P&gt;&lt;P&gt;Tested and it works perfectly, and you can even change it in the meanwhile:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;splunk edit cluster-config -max_nonhot_rep_kBps &amp;lt;value&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp;&lt;/FONT&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 15 Oct 2020 15:15:07 GMT</pubDate>
    <dc:creator>edoardo_vicendo</dc:creator>
    <dc:date>2020-10-15T15:15:07Z</dc:date>
    <item>
      <title>Limit output network bandwidth during peer decommissioning</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524456#M88536</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;We are in a multi-site indexer cluster environment, and we are going to upgrade our infrastructure from 3 Indexer to 6 Indexer.&lt;/P&gt;&lt;P&gt;Basically we will add 6 new indexers, and decommission the 3 old indexers.&lt;/P&gt;&lt;P&gt;Do you know which is the speed in MBytes/s that will be reached once the data will start to be copied from the 3 old Indexers to the 6 new indexers?&lt;/P&gt;&lt;P&gt;We did some test in our development environment, where we have simulated a similar scenario, and it seems it started copying very fast with 170 MBytes/s&amp;nbsp;peak (we have checked it with an nmon session at the source Indexer machine). In order to start the copying process we had:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;added the new Indexers to the Master Node&lt;/LI&gt;&lt;LI&gt;switched the Splunk HFs to forward data to the new Indexers&lt;/LI&gt;&lt;LI&gt;run, one by one on each old Indexer, the command&amp;nbsp;&lt;FONT face="courier new,courier"&gt;&lt;SPAN&gt;splunk offline --enforce-counts&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Before starting the test we have read the following documentation:&lt;/P&gt;&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Takeapeeroffline#Estimate_the_cluster_recovery_time_when_a_peer_gets_decommissioned" target="_blank" rel="noopener"&gt;https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Takeapeeroffline#Estimate_the_cluster_recovery_time_when_a_peer_gets_decommissioned&lt;/A&gt;&lt;/P&gt;&lt;P&gt;In the official documentation it is mentioned:&lt;/P&gt;&lt;P class="lia-indent-padding-left-30px"&gt;&lt;EM&gt;10GB (rawdata and/or index files) from one peer to another across a LAN takes about 5-10 minutes&lt;/EM&gt;&lt;/P&gt;&lt;P&gt;therefore copying speed should go from 136 Mbit/s to 272 Mbit/s.&lt;/P&gt;&lt;P&gt;If the speed we have observed is correct (more than 1Gbit/s), do you know if there is any way to limit the output bandwidth?&lt;/P&gt;&lt;P&gt;Thanks a lot,&lt;/P&gt;&lt;P&gt;Edoardo&lt;/P&gt;</description>
      <pubDate>Tue, 13 Oct 2020 16:17:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524456#M88536</guid>
      <dc:creator>edoardo_vicendo</dc:creator>
      <dc:date>2020-10-13T16:17:57Z</dc:date>
    </item>
    <item>
      <title>Re: Limit output network bandwidth during peer decommissioning</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524462#M88537</link>
      <description>&lt;P&gt;Check out the&amp;nbsp;&lt;FONT face="courier new,courier"&gt;&lt;SPAN class="fontstyle0"&gt;max_nonhot_rep_kBps&lt;/SPAN&gt;&lt;/FONT&gt;&amp;nbsp;setting in server.conf.&lt;/P&gt;</description>
      <pubDate>Tue, 13 Oct 2020 17:03:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524462#M88537</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-10-13T17:03:42Z</dc:date>
    </item>
    <item>
      <title>Re: Limit output network bandwidth during peer decommissioning</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524883#M88621</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;Thanks a lot for your suggestion!&lt;/P&gt;&lt;P&gt;Tested and it works perfectly, and you can even change it in the meanwhile:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;splunk edit cluster-config -max_nonhot_rep_kBps &amp;lt;value&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp;&lt;/FONT&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 15 Oct 2020 15:15:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Limit-output-network-bandwidth-during-peer-decommissioning/m-p/524883#M88621</guid>
      <dc:creator>edoardo_vicendo</dc:creator>
      <dc:date>2020-10-15T15:15:07Z</dc:date>
    </item>
  </channel>
</rss>

