Deployment Architecture

Cluster Master failure - is there any scenario searching will be impacted other than a search peer going down?


As in,
hypothetical scenario

If the CM goes down overnight and it takes forever (eg. 10h) for a standby CM to manually takeover/same CM to be recovered from a VM snapshot
but all indexers happily stay up (and able to contact each other), is there any chance a scheduled search not finding some primary buckets ?

0 Karma

Ultra Champion
0 Karma


I thought it was clear from the way I worded the question I had already read that Adonio.
I just asked the community to be extra safe.
I guess your answer means no, there isn't

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...