If facing issue after migrating single site to multisite indexer cluster. SF/RF not met after 5 days still fixup task increasing. Can any help to resolve this SF/RF issue ?
More details needed pls
- The Splunk Version
- the daily license limit
- approx how long back the Splunk was installed(to find out how much data is currently stored inside the Splunk)
- details about indexer/SHC pls (to understand how many indexers are in Indexer Cluster)
- the SF and RF pls
and the most important - the internal splunk logs
may i know if you have created a Support ticket to Splunk pls.
Best Regards
Sekar
You really need to investigate your internal logs for bucket replication messages to get an idea of what is happening or not happening. There are so many contributing factors to what could be occurring it would be difficult to provide an answer at this point.