Deployment Architecture

Indexer cluster in different datacenters

d_lim
Path Finder

Hi splunk community,

In my environment I have 1 indexer each in 2 different datacenters, 1 searchhead, 1 clustermaster , X forwarders.

Is it possible for the following configuration in server.conf, with 1 searchpeer each, in 2 sites, if replication is not required? Again, I do not need replication.

site_replication_factor = origin:1, total:1
site_search_factor = origin:1, total:1
 
Or can the searchpeer in the different datacenters, form a single site, 2 node cluster, with replication_factor=1
search_factor=1
 
I know that the recommendation is for latency to be <100ms.
Thanks for your inputs!
Labels (4)
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...