Deployment Architecture

Can someone explain the majority principle of search header clustering captain election?

munang
Path Finder

I have a question because I am confused about the majority principle of search header clustering captain election.

the question is
Assume a dynamic Captain Election.

[1]
When conducting Captain Election, a majority of the cluster members must vote to be elected.

In step 1, more than half means

For example, if there are 5 search headers and one is in the Down state,

I am confused whether the 3rd generation, which is the majority of the 4th generation, should vote, or whether the 3rd generation, which is the majority of the 5th generation, should vote.

In other words, I wonder if it is included even if the target of the vote is down.

 

[2]
Also, according to the majority rule, there must be at least three Search Header. I don't know why Search Header needs to be 3 generations.

For example, if there are only two A and B, here B declares to be the captain first, then A votes and B votes for himself, so more than half of the votes are satisfied, so B can become the captain is not it?

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

1) SHC members are called "members" or "nodes", but not "generations".  A generation refers to the set of primary buckets that will be searched.

The number of members needed for a SHC majority is set when the cluster is defined.  For a 5-member cluster that number will always be 3, regardless of how many are up or down.

2) Three is the minimum to ensure an election is possible if a member is unavailable.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

1) SHC members are called "members" or "nodes", but not "generations".  A generation refers to the set of primary buckets that will be searched.

The number of members needed for a SHC majority is set when the cluster is defined.  For a 5-member cluster that number will always be 3, regardless of how many are up or down.

2) Three is the minimum to ensure an election is possible if a member is unavailable.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...