https://community.splunk.com/t5/Splunk-Search/multisite-replication-factor/m-p/237895#M188677 <P>I have another site I want to add with 2 indexers and 1 search, same setup as site1.<BR /> I want to have copies across both clusters so if my original 2 indexers go down, I want the second site to have all data.<BR /> Would this work?</P> <P>site_replication_factor = origin:2,total:4<BR /> site_search_factor = origin:1,total:2</P> Tue, 29 Sep 2020 10:06:04 GMT tvernick 2020-09-29T10:06:04Z https://community.splunk.com/t5/Splunk-Search/multisite-replication-factor/m-p/237895#M188677 <P>I have another site I want to add with 2 indexers and 1 search, same setup as site1.<BR /> I want to have copies across both clusters so if my original 2 indexers go down, I want the second site to have all data.<BR /> Would this work?</P> <P>site_replication_factor = origin:2,total:4<BR /> site_search_factor = origin:1,total:2</P> Tue, 29 Sep 2020 10:06:04 GMT https://community.splunk.com/t5/Splunk-Search/multisite-replication-factor/m-p/237895#M188677 tvernick 2020-09-29T10:06:04Z https://community.splunk.com/t5/Splunk-Search/multisite-replication-factor/m-p/237896#M188678 <P>Yes, with this conf you will have copy of data on each of your Indexers. <BR /> To make sure you have a searchable copy of data on both sites you can change your site_search_factor to:</P> <P>site_search_factor = origin:1, site1:1,site2:1</P> Tue, 29 Sep 2020 10:06:13 GMT https://community.splunk.com/t5/Splunk-Search/multisite-replication-factor/m-p/237896#M188678 gfreitas 2020-09-29T10:06:13Z