Deployment Architecture

Differentiation of indices between nodes

Semen
New Member

What I need to deploy clustered indexes on different nodes. I want to get 3 clusters of 2 nodes each with the ability to search in all clusters from one search head.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You want a multi-site cluster. See https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer/Multisitedeploymentoverview.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You want a multi-site cluster. See https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer/Multisitedeploymentoverview.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

Semen
New Member

Thanks for the answer.
As far as I understand, in a multisite, data is replicated between sites. I need 3 clusters without replication between the clusters, but with the ability to search on all the clusters with one search head.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

It is typical for multi-site clusters to replicate data between sites, but you don't have to do so.

---
If this reply helps you, an upvote would be appreciated.
0 Karma

Semen
New Member

What are the index.conf and server.cong settings for this? There is no node selection in the index settings.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

In server.conf, site_replication_factor = origin:2, total:2 will keep all copies in the originating site.

---
If this reply helps you, an upvote would be appreciated.
0 Karma

Semen
New Member

If a single node is unavailable in a site, will the index be replicated to a neighboring site? How to avoid it.

0 Karma

Semen
New Member

Thanks for the answer.
As far as I understand, in a multisite, data is replicated between sites. I need 3 clusters without replication between the clusters, but with the ability to search on all the clusters with one search head.
alt text

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.