How to stop site replication when using multisite cluster? (just only need local site replication)

[hkhat5]

Dear all,

I have site1 and site2 with multisite cluster on.
However, i just only want to replicate the data within local site only.

What and how to configure that setup?

Thanks
Kelvin

[dxu_splunk]

you can set site_replication_factor and site_search_factor's origin:N and total:N to be the same.
for example:

site_replication_factor = origin:2, total:2
site_search_factor = origin:1, total:1

[hkhat5]

http://answers.splunk.com/answers/65766/configure-one-search-head-to-search-multiple-clusters-each-w...

i use that to fix my problem.

Thank you for your help

^^

[gkanapathy]

Although, I do believe that if one site doesn't have enough servers, it will try to replicate to the other. Maybe you want this, maybe you don't.

[gkanapathy]

This is a better answer than mine.

[gkanapathy]

I don't understand what you're asking for. Why are you using multi-site clustering in the first place? Why don't you just create two separate clusters?

[hkhat5]

gkanapathy, thanks for your reply.

Just like you said, create 2 two separate clusters.
Can it control by single master node?
Also, can it search all the result with one search head?

Thanks

Kelvin

[gkanapathy]

You can search both with one search head, but you need two masters, one for each cluster.

[hkhat5]

Do you mean that install external search head just outside the 2 clusters?
Thanks