Deployment Architecture

After Migrate single site to multisite Indexer cluster

Mitesh_Gajjar
Explorer

If facing issue after migrating single site to multisite indexer cluster. SF/RF not met after 5 days still fixup task increasing. Can any help to resolve this SF/RF issue ? 

Labels (1)
0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @Mitesh_Gajjar 

More details needed pls

- The Splunk Version  

- the daily license limit

- approx how long back the Splunk was installed(to find out how much data is currently stored inside the Splunk)

- details about indexer/SHC pls (to understand how many indexers are in Indexer Cluster)
- the SF and RF pls 

and the most important - the internal splunk logs

may i know if you have created a Support ticket to Splunk pls. 


Best Regards

Sekar

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

dural_yyz
Motivator

You really need to investigate your internal logs for bucket replication messages to get an idea of what is happening or not happening.  There are so many contributing factors to what could be occurring it would be difficult to provide an answer at this point.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...