Deployment Architecture

Indexer cluster data re-balancing peer exclusion?

mamiller400
New Member

I have an Indexer cluster with 4 nodes and a master, currently the four peers are the only nodes ingesting data (I'm unsure if this goes against best practice or not). I'm curious, if I start data re-balancing, will the cluster try to move data to my master? If so, is there a way to tell it to not do this?

0 Karma

adonio
Ultra Champion

It will only re-balance across peer nodes, read more here:
http://docs.splunk.com/Documentation/Splunk/6.5.2/Indexer/Rebalancethecluster
Hope it helps

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...