<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Disable kvstore replication to indexers in Knowledge Management</title>
    <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263564#M2330</link>
    <description>&lt;P&gt;Fair enough. My response you refer to could have been a bit more nuanced. &lt;BR /&gt;
Pre 6.3, there was no capability to replicate KV-Store based lookups to the search peers, which prevented you from using those lookups in searches, because they would not have been available to the indexers similar to what search bundle replication does.&lt;BR /&gt;
This limitation was removed in 6.3, i.e. we provided the controls to replicate those lookups that are needed by search peers to fulfill search requests. &lt;BR /&gt;
Yes, you can disable that for lookups you only need to have available on the search heads.&lt;BR /&gt;
Sorry for any confusion this may have caused you. &lt;/P&gt;</description>
    <pubDate>Mon, 18 Jul 2016 18:00:27 GMT</pubDate>
    <dc:creator>s2_splunk</dc:creator>
    <dc:date>2016-07-18T18:00:27Z</dc:date>
    <item>
      <title>Disable kvstore replication to indexers</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263560#M2326</link>
      <description>&lt;P&gt;According to this &lt;A href="https://answers.splunk.com/answers/370034/kvstore-with-replication-setup.html?sort=votes"&gt;post&lt;/A&gt; kvstores get replicated to indexers.&lt;/P&gt;

&lt;P&gt;Is there a way to disable or specifically control this behaviour.&lt;/P&gt;

&lt;P&gt;We have a kvstore &amp;gt; 100GB that doesn't need to be replicated. And I believe this &lt;EM&gt;may&lt;/EM&gt; be causing performance issues.&lt;/P&gt;</description>
      <pubDate>Mon, 18 Jul 2016 06:23:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263560#M2326</guid>
      <dc:creator>Lucas_K</dc:creator>
      <dc:date>2016-07-18T06:23:47Z</dc:date>
    </item>
    <item>
      <title>Re: Disable kvstore replication to indexers</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263561#M2327</link>
      <description>&lt;P&gt;Hi Lucas,&lt;/P&gt;

&lt;P&gt;no worry. Your kvstore is not automatically replicated to your indexer.&lt;/P&gt;

&lt;P&gt;You have a parameter in collections.conf called "replicate" its false by default. By switching it to "true" your kvstore collection gets replicated to the indexers.&lt;/P&gt;

&lt;P&gt;So no worry about your 100GB + kvstore.&lt;/P&gt;

&lt;P&gt;regards&lt;/P&gt;</description>
      <pubDate>Mon, 18 Jul 2016 07:17:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263561#M2327</guid>
      <dc:creator>TStrauch</dc:creator>
      <dc:date>2016-07-18T07:17:32Z</dc:date>
    </item>
    <item>
      <title>Re: Disable kvstore replication to indexers</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263562#M2328</link>
      <description>&lt;P&gt;Can't you simply disable the KVStore on the indexers via &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf"&gt;server.conf&lt;/A&gt;?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[kvstore]
disabled = true|false
* Set to true to disable the KV Store process on the current server. To
  completely disable KV Store in a deployment with search head clustering or
  search head pooling, you must also disable KV Store on each individual
  server.
* Defaults to false.
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 18 Jul 2016 10:57:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263562#M2328</guid>
      <dc:creator>lcrielaa</dc:creator>
      <dc:date>2016-07-18T10:57:09Z</dc:date>
    </item>
    <item>
      <title>Re: Disable kvstore replication to indexers</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263563#M2329</link>
      <description>&lt;P&gt;Ahh so that post is actually wrong! Thanks!&lt;/P&gt;</description>
      <pubDate>Mon, 18 Jul 2016 12:51:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263563#M2329</guid>
      <dc:creator>Lucas_K</dc:creator>
      <dc:date>2016-07-18T12:51:50Z</dc:date>
    </item>
    <item>
      <title>Re: Disable kvstore replication to indexers</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263564#M2330</link>
      <description>&lt;P&gt;Fair enough. My response you refer to could have been a bit more nuanced. &lt;BR /&gt;
Pre 6.3, there was no capability to replicate KV-Store based lookups to the search peers, which prevented you from using those lookups in searches, because they would not have been available to the indexers similar to what search bundle replication does.&lt;BR /&gt;
This limitation was removed in 6.3, i.e. we provided the controls to replicate those lookups that are needed by search peers to fulfill search requests. &lt;BR /&gt;
Yes, you can disable that for lookups you only need to have available on the search heads.&lt;BR /&gt;
Sorry for any confusion this may have caused you. &lt;/P&gt;</description>
      <pubDate>Mon, 18 Jul 2016 18:00:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/Disable-kvstore-replication-to-indexers/m-p/263564#M2330</guid>
      <dc:creator>s2_splunk</dc:creator>
      <dc:date>2016-07-18T18:00:27Z</dc:date>
    </item>
  </channel>
</rss>

