Deployment Architecture
Highlighted

How to increase the index size across a multisite indexer cluster?

New Member

So I have been following the example for updating an index size on a cluster. I tested it out on our dev environment and it worked fine. I went to do it in our prod environment that I inherited and it is a multisite cluster so as the documentation says, the "edit button is disabled for multisite clusters".

So how do you increase an index size across a multisite indexer cluster?

0 Karma
Highlighted

Re: How to increase the index size across a multisite indexer cluster?

Splunk Employee
Splunk Employee

If you want to make changes to the specifications for an index, you should do so on all peer nodes, not just one. The best way to do that is to make the changes in indexes.conf and then distribute the file to all the peer nodes via the configuration bundle method. See:

View solution in original post

Highlighted

Re: How to increase the index size across a multisite indexer cluster?

New Member

Thanks. We managed to get it to work through the CLI

Use the CLI to apply the bundle

  1. To apply the configuration bundle to the peers, run this CLI command on the master:

splunk apply cluster-bundle

0 Karma