I'm building out my dev Splunk 6.3 env, and ran this command:
./splunk edit cluster-config -mode master -multisite true -site RTP -available_sites RTP,OMA,MMK -site_replication_factor origin:1,total:3 -site_search_factor origin:1,total:3 -secret splunkDEV
When I do this, it returns "In handler 'clusterconfig': Invalid site id: RTP". Should RTP be removed, since it's listed in the initial site statement? The training docs follow this format.
From the server.conf spec:
site = < site>
* Specifies the site that this splunk instance belongs to when multisite is enabled.
* Valid values for site-id include site1 to site63
You can't make up your own names, you have to use site+integer.