Deployment Architecture

Indexer server was down & data durability status red

nilupat
Engager

Hi,

I have distrubuted setup. 

Each site has 1 indexer /1 search head & 1 master server.

They are part of cluster.

One of the indexer from other site was down for more than 48 hours. Now indexer is up .

On master server i can see data durability as red.

How do i fix the issue now ?

Regards,

Nilupat

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Have you two separate environments with single node clusters or one clustered environment with two members and on primary CM and secondary standby? Have your cluster(s) single or multisite configurations?

If you have a single site cluster (member can be a different sites), this should be fixed by itself after cluster can resync it to fulfil RF&SF. Also multisite cluster should fix the situation by itself in normal cases. 

r. Ismo

View solution in original post

0 Karma

nilupat
Engager

I have single cluster with 2 site.

1 master & other stand by

1 searchhead & 1 indexer in each site

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Have you two separate environments with single node clusters or one clustered environment with two members and on primary CM and secondary standby? Have your cluster(s) single or multisite configurations?

If you have a single site cluster (member can be a different sites), this should be fixed by itself after cluster can resync it to fulfil RF&SF. Also multisite cluster should fix the situation by itself in normal cases. 

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...