- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
suhprano
Path Finder
03-17-2011
11:46 PM
It looks like indexes on both nodes are updated with the same entries. Does distributed indexing load and index the same data from a source to both indexers?
UPDATE It turns out that I've configured it to send each search peer a copy of the data to index. Does distributed search work more efficiently if the indexes are distributed of if they are a clone of each other's data?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
gkanapathy

Splunk Employee
03-18-2011
12:49 AM
No, it does not. All you'll if you distribute search over clones is that you'll get two copies of each cloned event in your results.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
gkanapathy

Splunk Employee
03-18-2011
12:49 AM
No, it does not. All you'll if you distribute search over clones is that you'll get two copies of each cloned event in your results.
