I need to upgrade OS Patch and need to restart the host (server).
I have a cluster with one master node and two peers.
How can I restart the master node and peers in this situation?
sure, if there will be no problem/trouble regarding data loss because of the missing indexers...go ahead stop everything do your upgrade and restart everything.
Many thanks for your reply MuS.
But my requirement is bit different.
I need to upgrade OS patch and I'm not sure of the time taken for the upgrade.
Can I stop Splunk in all the master and peer before upgrading and start the splunk once the upgradation is done?
